CVE-2022-38122

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published: Nov 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-381237.2Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code int CVE-2022-381246.5Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.CVE-2022-381255.5Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiti CVE-2022-381299.8A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor M CVE-2022-38136.5A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The man CVE-2022-381309.8The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes CVE-2022-381316.1RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to mal CVE-2022-381328.8Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacke CVE-2022-381335.3In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases CVE-2022-381348.8Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.CVE-2022-381354.3Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher CVE-2022-381367.3Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.