PT-2022-24213 · Unknown · Upsmon Pro

Michael Heinzl · Published 2022-11-10 · Updated 2022-11-15 · CVE-2022-38119

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UPSMON Pro (affected versions not specified)

Description The UPSMON Pro login function has insufficient authentication, allowing an unauthenticated remote attacker to bypass authentication and gain administrator privileges to access, control the system, or disrupt the service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-38119

Affected Products

Upsmon Pro

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-38119 · Security Note
• https://osv.dev/vulnerability/CVE-2022-38119 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-6678-e9fbe-1.html · Note
• https://t.me/cvenotify/37496 · Telegram Post
• https://t.me/cibsecurity/52922 · Telegram Post