Lucene search
+L

68 matches found

CNNVD
CNNVD
added 2023/09/28 12:0 a.m.11 views

Generex CS141 Code Issue Vulnerability

The Generex CS141 is a series of Ethernet adapters from the German company Generex. A code issue exists in the Generex CS141 prior to version 2.06, which stems from an unrestricted file upload. The vulnerability can be exploited to upload or delete any type of file in the "upload" directory witho...

9.1CVSS7.1AI score0.00634EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/28 12:0 a.m.8 views

PT-2023-15226 · Unknown · Generex Cs141

Name of the Vulnerable Software and Affected Versions: Generex CS141 versions prior to 2.06 Description: The issue allows for an unrestricted upload of files, enabling an attacker to upload and/or delete any type of file without format restrictions or authentication in the "upload" directory. Thi...

9.1CVSS9AI score0.00634EPSS
SaveExploits0References5
NVD
NVD
added 2023/03/31 10:15 p.m.30 views

CVE-2022-47190

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

10CVSS9.8AI score0.0157EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/31 10:15 p.m.19 views

CVE-2022-47189

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

9.1CVSS7.8AI score0.00853EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/31 10:15 p.m.15 views

CVE-2022-47188

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/31 10:15 p.m.13 views

CVE-2022-47192

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password...

8.8CVSS8.7AI score0.01301EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/31 10:15 p.m.6 views

CVE-2022-47190

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

9.8CVSS6.1AI score0.0157EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/31 10:15 p.m.4 views

CVE-2022-47188

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

7.5CVSS5.9AI score0.00914EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/31 10:15 p.m.4 views

CVE-2022-47192

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password...

8.8CVSS5.8AI score0.01301EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/31 10:15 p.m.7 views

CVE-2022-47189

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

9.1CVSS5.8AI score0.00853EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/31 10:15 p.m.11 views

CVE-2022-47191

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

8.8CVSS5.8AI score0.01057EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/31 10:15 p.m.7 views

CVE-2022-47191

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

8.8CVSS5.8AI score0.01057EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/31 10:15 p.m.18 views

Design/Logic Flaw

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

6.4CVSS9AI score0.00853EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.23 views

Design/Logic Flaw

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password...

6.5CVSS8.9AI score0.01301EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.15 views

Default credentials

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

5CVSS7.9AI score0.00914EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.18 views

Design/Logic Flaw

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

6.5CVSS9.1AI score0.01057EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.26 views

Code injection

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

7.5CVSS9.7AI score0.0157EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/31 12:0 a.m.9 views

CVE-2022-47190 RCE via file upload vulnerability in Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

10CVSS9.7AI score0.0157EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.22 views

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a webshell...

10CVSS8.4AI score0.0157EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.7 views

PT-2023-15230 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows a remote attacker to upload a firmware file containing a webshell, which could enable the execution of arbitrary code as root. Recommendations: For versions prior to 2.06,...

10CVSS9.6AI score0.0157EPSS
SaveExploits0References7
Rows per page
Query Builder