CyberSecBulletin

POWERCOM vulnerabilities

We track 2 vulnerabilities in POWERCOM products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2022.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest POWERCOM vulnerabilities

  • 7.5 High severity

    UPSMON PRO: Cleartext Transmission of Sensitive Information

    CVE-2022-38122POWERCOM

    UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

  • 9.8 Critical severity

    UPSMON PRO: Improper Authentication

    CVE-2022-38119POWERCOMEPSS 1.25%

    UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.