Generex
Generex Cs141 Firmware: vulnerabilidades y CVE
Generex Cs141 Firmware tiene 9 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-47187 | Media (6.1) | 0.39% | — | 28 sept 2023 | There is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file with HTML content. When HTML files are allowed, XSS payload… |
| CVE-2022-47186 | Crítica (9.1) | 0.63% | — | 28 sept 2023 | There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the… |
| CVE-2022-47192 | Alta (8.8) | 1.3% | — | 31 mar 2023 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password. |
| CVE-2022-47191 | Alta (8.8) | 1.1% | — | 31 mar 2023 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges. |
| CVE-2022-47190 | Crítica (9.8) | 1.6% | — | 31 mar 2023 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root. |
| CVE-2022-47189 | Crítica (9.1) | 0.85% | — | 31 mar 2023 | Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device. |
| CVE-2022-47188 | Alta (7.5) | 0.91% | — | 31 mar 2023 | There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him… |
| CVE-2022-42457 | Alta (7.2) | 2.5% | — | 6 oct 2022 | Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by… |
| CVE-2020-11420 | Media (6.5) | 1.6% | — | 27 abr 2020 | UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by doing this achieve… |