PatchTheCVEupspowercom vulnerabilities
Recent CVEs affecting upspowercom products. 4 tracked.
upspowercom has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-11-10. Highest priority: CVE-2022-38119 (score 56/100).
- CVE-2022-38122 HIGH 7.5 DOWNGRADE UPSMON PRO transmits sensitive data in cleartext over HTTP protocol
- CVE-2022-38121 MEDIUM 6.5 DOWNGRADE UPSMON PRO configuration file stores user password in plaintext under public user directory
- CVE-2022-38120 MEDIUM 6.5 DOWNGRADE UPSMON PRO’s has a path traversal vulnerability
- CVE-2022-38119 CRITICAL 9.8 DOWNGRADE UPSMON Pro login function has insufficient authentication
FAQ
How do I fix upspowercom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is upspowercom being exploited right now?
None of the tracked upspowercom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which upspowercom CVE should I patch first?
CVE-2022-38119 currently ranks highest (56/100): UPSMON Pro login function has insufficient authentication.