Vulnerability record · CVE-2022-38122 · published 10 November 2022

CVE-2022-38122: Upspowercom upsmon pro cleartext transmission vulnerability

UUpspowercom · Upsmon Pro

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

7.5 CVSS 3.1 High EPSS 0.54% · top 56.8% CWE-319 · Cleartext transmission

7.5CVSS 3.1 base score

0.54%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

UUpsmon Pro Upspowercom

References

Link	Tags
https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html	Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html	Third Party Advisory

Track CVE-2022-38122 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-38119Upspowercom upsmon pro improper authentication vulnerabilityUPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication…EPSS 1.1%10 Nov 2022 6.5CVE-2022-38121Upspowercom upsmon pro insufficiently protected credentials vulnerabilityUPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access…EPSS 3.5%10 Nov 2022 6.5CVE-2022-38120Upspowercom upsmon pro path traversal vulnerabilityUPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authenticatio…EPSS 5.8%10 Nov 2022

Source: NIST National Vulnerability Database (record CVE-2022-38122), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.