Lucene search
+L

83 matches found

NVD
NVD
added 2023/03/31 10:15 p.m.11 views

CVE-2022-47191

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

8.8CVSS5.8AI score0.01057EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/31 10:15 p.m.6 views

CVE-2022-47191

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

8.8CVSS5.8AI score0.01057EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/31 10:15 p.m.18 views

Design/Logic Flaw

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

6.4CVSS9AI score0.00853EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.23 views

Design/Logic Flaw

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password...

6.5CVSS8.9AI score0.01301EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.25 views

Code injection

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

7.5CVSS9.7AI score0.0157EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.18 views

Design/Logic Flaw

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

6.5CVSS9.1AI score0.01057EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/31 10:15 p.m.15 views

Default credentials

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

5CVSS7.9AI score0.00914EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/31 12:0 a.m.9 views

CVE-2022-47190 RCE via file upload vulnerability in Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

10CVSS9.7AI score0.0157EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.22 views

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a webshell...

10CVSS8.4AI score0.0157EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/03/31 12:0 a.m.34 views

CVE-2022-47190 RCE via file upload vulnerability in Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

10CVSS9.9AI score0.0157EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/31 12:0 a.m.10 views

CVE-2022-47189 DoS via file upload vulnerability at Generex CS141

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

7.5CVSS9.1AI score0.00853EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.7 views

PT-2023-15230 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows a remote attacker to upload a firmware file containing a webshell, which could enable the execution of arbitrary code as root. Recommendations: For versions prior to 2.06,...

10CVSS9.6AI score0.0157EPSS
SaveExploits0References7
CVE
CVE
added 2023/03/31 12:0 a.m.39 views

CVE-2022-47192

CVE-2022-47192 affects Generex UPS CS141 before version 2.06. A remote attacker can upload a backup file containing a modified users.json to the device’s web server, enabling replacement of the administrator password. Technical details across sources consistently describe a file-upload/change sce...

8.8CVSS8.7AI score0.01301EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/31 12:0 a.m.8 views

CVE-2022-47191 Privilege Escalation via file upload vulnerability at Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

4.3CVSS8.8AI score0.01057EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.13 views

Generex UPS Adapter CS141 安全漏洞

Generex UPS Adapter CS141 is a UPS Uninterruptible Power System adapter from Generex. A security vulnerability exists in Generex UPS Adapter CS141 versions prior to 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a misconfiguration...

9.1CVSS8.3AI score0.00853EPSS
SaveExploits0References4
CVE
CVE
added 2023/03/31 12:0 a.m.48 views

CVE-2022-47190

CVE-2022-47190 affects Generex UPS CS141 prior to version 2.06. A remote attacker can upload a firmware file containing a webshell, enabling arbitrary code execution as root. The publicly documented impact is Unrestricted firmware file upload leading to remote code execution. Affected product: Ge...

10CVSS9.8AI score0.0157EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.7 views

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file with modified privileges...

8.8CVSS8.3AI score0.01057EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/03/31 12:0 a.m.19 views

CVE-2022-47192 Admin password reset via file upload vulnerability in Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password...

8.8CVSS9.2AI score0.01301EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/31 12:0 a.m.23 views

CVE-2022-47189 DoS via file upload vulnerability at Generex CS141

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

7.5CVSS9.4AI score0.00853EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.16 views

PT-2023-15229 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows an attacker to upload a firmware file containing an incorrect configuration, disrupting the normal functionality of the device. Recommendations: For versions prior to 2.06...

9.1CVSS9.2AI score0.00853EPSS
SaveExploits0References7
Rows per page
Query Builder