← CVE Intelligence

CVE-2022-38121

POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials PUBLISHED

Description (CNA)

UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.

Affected (CNA)

Vendor / productVersions
POWERCOM CO., LTD. / UPSMON PROaffected 2.57

CWE

CWE-522

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.