CVE-2022-38122: Upspowercom Upsmon Pro

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

Affected products

• Upspowercom Upsmon Pro: version 2.57 only

Published 2022-11-10. Last modified 2026-06-17.