upsmon pro vulnerabilities and fixes

Recent CVEs affecting upsmon pro, with upgrade or downgrade steps. 4 tracked.

Also searched as: upsmonpro.

upsmon pro has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-11-10. Highest priority: CVE-2022-38119 (score 56/100).

• CVE-2022-38122 HIGH 7.5 DOWNGRADE UPSMON PRO transmits sensitive data in cleartext over HTTP protocol
• CVE-2022-38121 MEDIUM 6.5 DOWNGRADE UPSMON PRO configuration file stores user password in plaintext under public user directory
• CVE-2022-38120 MEDIUM 6.5 DOWNGRADE UPSMON PRO’s has a path traversal vulnerability
• CVE-2022-38119 CRITICAL 9.8 DOWNGRADE UPSMON Pro login function has insufficient authentication

FAQ

How do I fix upsmon pro vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is upsmon pro being exploited right now?

None of the tracked upsmon pro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which upsmon pro CVE should I patch first?

CVE-2022-38119 currently ranks highest (56/100): UPSMON Pro login function has insufficient authentication.

RSS feed for upsmon pro · ← Back to latest CVEs