Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: Generex Component: Cs141 Firmware Clear all filters
TI-2022-23391 CVE-2022-47187 · GHSA-hqq7-2cj4-xmjf

File upload XSS vulnerability in Generex CS141

Priority LOW 33

There is a file upload XSS vulnerability in Generex CS141 below 2.06 version.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00387 Published 2023-09-28 Fixed in 2.06 CWE-79
TI-2022-23396 CVE-2022-47192 · GHSA-x4qx-588r-pmgq

Admin password reset via file upload vulnerability in Generex CS141

Priority MEDIUM 43

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01301 Published 2023-03-31 Fixed in 2.06 CWE-20
TI-2022-23395 CVE-2022-47191 · GHSA-cqh7-8cm4-66p7

Privilege Escalation via file upload vulnerability at Generex CS141

Priority MEDIUM 40

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01057 Published 2023-03-31 Fixed in 2.06 CWE-20
TI-2022-23394 CVE-2022-47190 · GHSA-9p85-r5r3-72xv

RCE via file upload vulnerability in Generex CS141

Priority MEDIUM 52

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0157 Published 2023-03-31 Fixed in 2.06 CWE-20
TI-2022-23393 CVE-2022-47189 · GHSA-g9px-cw8c-v96r

DoS via file upload vulnerability at Generex CS141

Priority MEDIUM 47

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00853 Published 2023-03-31 Fixed in 2.06 CWE-20
TI-2022-23392 CVE-2022-47188 · GHSA-7j8w-v723-8chg

Improper Input Validation in Generex CS141

Priority MEDIUM 41

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00914 Published 2023-03-31 Fixed in 2.06 CWE-20
TI-2022-20656 CVE-2022-42457 · GHSA-vv22-qqx8-q8jm

Generex CS141 through 2.10 allows remote command execution by administrators via a web…

Priority MEDIUM 45

Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by i…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03224 Published 2022-10-06 No fix listed