Design/Logic Flaw

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

CVE-2022-47192

CVE-2022-47192 affects Generex UPS CS141 before version 2.06. A remote attacker can upload a backup file containing a modified users.json to the device’s web server, enabling replacement of the administrator password. Technical details across sources consistently describe a file-upload/change sce...

CVE-2022-47189: Improper Input Validation

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device...

CVE-2022-47188 Improper Input Validation in Generex CS141

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

CVE-2022-47188 Improper Input Validation in Generex CS141

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

PT-2023-15232 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows a remote attacker to upload a backup file containing a modified users.json to the web server of the device, enabling them to replace the administrator password...

PT-2023-15229 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows an attacker to upload a firmware file containing an incorrect configuration, disrupting the normal functionality of the device. Recommendations: For versions prior to 2.06...

PT-2023-15231 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows a remote attacker to upload a firmware file containing a file with modified permissions, which can lead to privilege escalation. Recommendations: For versions prior to 2.0...

CVE-2022-47190 RCE via file upload vulnerability in Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a webshell...

CVE-2022-47191 Privilege Escalation via file upload vulnerability at Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

CVE-2022-47191: Improper Input Validation

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

CVE-2022-47188

Generex UPS CS141, affected in versions prior to 2.06, contains an arbitrary local file read vulnerability. An attacker using default credentials can upload a backup file containing a symlink to /etc/shadow, enabling content access to that path. The issue is documented in CVE-2022-47188 and corro...

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file with modified privileges...

CVE-2022-47191 Privilege Escalation via file upload vulnerability at Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges...

CVE-2022-47191

Generex UPS CS141 versions prior to 2.06 are vulnerable to CVE-2022-47191 due to an unrestricted file upload that can let a remote attacker upload a firmware file with modified permissions and escalate privileges. Documented across multiple sources (NVD/NVD-derived entry, Tenable OT plugin, and C...

CVE-2022-47192 Admin password reset via file upload vulnerability in Generex CS141

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password...

CVE-2022-47190

CVE-2022-47190 affects Generex UPS CS141 prior to version 2.06. A remote attacker can upload a firmware file containing a webshell, enabling arbitrary code execution as root. The publicly documented impact is Unrestricted firmware file upload leading to remote code execution. Affected product: Ge...

CVE-2022-47190: Improper Input Validation

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

CVE-2022-47188: Improper Input Validation

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...