Generex UPS Cs141 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Generex UPS Cs141, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-47189generexcs141_firmware+1
EPSS score0.85%
Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device.CVE-2022-47187generexcs141_firmware+1EPSS score0.39%
There is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file with HTML content. When HTML files are allowed, XSS payload can be injected into the uploaded file.CVE-2022-47186generexcs141_firmware+1EPSS score0.63%
There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.CVE-2022-47188generexcs141_firmware+1EPSS score0.91%
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.CVE-2022-47192generexcs141_firmware+1EPSS score1.30%
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.CVE-2022-47190generexcs141_firmware+1EPSS score1.57%
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.CVE-2022-47191generexcs141_firmware+1EPSS score1.06%
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges.