Lucene search
HistoryMar 31, 2023 - 10:15 p.m.
CVE-2022-47190
generex ups cs141
vulnerability
remote code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.005
Percentile
77.4%
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.
Affected configurations
Node
generexcs141_firmwareRange<2.06
generexcs141Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| generex | cs141_firmware | * | cpe:2.3:o:generex:cs141_firmware:*:*:*:*:*:*:*:* |
| generex | cs141 | - | cpe:2.3:h:generex:cs141:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-47190 RCE via file upload vulnerability in Generex CS141
2023-03-31 00:00:00
prion
prion
Code injection
2023-03-31 22:15:00
cve
cve
CVE-2022-47190
2023-03-31 22:15:07
kitploit
kitploit
Thunderstorm - Modular Framework To Exploit UPS Devices
2023-03-06 11:30:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.005
Percentile
77.4%
Related for NVD:CVE-2022-47190