CVE-2022-38122CWE-319

POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information

High · published November 10, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.8th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-11-10T02:20Z
EPSS history
Timeline
  • 10 NOV 02:20Z
    POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information
    cvelistv5