critical9.8
CVE-2022-38119
UPSMON Pro login function has insufficient authentication.
Impact
UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Upspowercom | Upsmon Pro | Version 2.57 |