CVE-2022-38119

9.8 criticalEPSS 1.1%

Critical (9.8) in upspowercom upsmon pro. EPSS 1.1% chance of exploitation in the next 30 days.

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2022-11-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

upspowercom:upsmon_pro

References

https://www.twcert.org.tw/tw/cp-132-6678-e9fbe-1.html
https://www.twcert.org.tw/tw/cp-132-6678-e9fbe-1.html

Check your stack JSON