Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials
Vulnerability Description
UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
不充分的凭证保护机制
Vulnerability Title
Powercom UPSMON PRO 安全漏洞
Vulnerability Description
Powercom UPSMON PRO是中国科风（Powercom）公司的一种多平台客户端-服务器软件，可通过 SNMP、HTTP 和 UDP 远程监控 UPS。 Powercom UPSMON PRO 存在安全漏洞，该漏洞源于其配置文件将用户密码明文存储在公共用户目录下导致具有一般用户权限的远程攻击者可以通过此不受保护的配置文件访问所有用户和管理员的帐户名和密码。
CVSS Information
N/A
Vulnerability Type
N/A