CVE-2022-38121

UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.
References
Link Resource
https://www.twcert.org.tw/tw/cp-132-6680-af0aa-1.html Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:upspowercom:upsmon_pro:2.57:*:*:*:*:*:*:*

Information

Published : 2022-11-10 03:15

Updated : 2022-11-15 08:01


NVD link : CVE-2022-38121

Mitre link : CVE-2022-38121

Products Affected
No products.
CWE