Generex Ups Cs141
7 CVEs affecting Generex Ups Cs141. Latest disclosed: 2023-09-28. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47190 | Critical | 10.0 | 2023-03-31 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary c… |
CVE-2022-47192 | High | 8.8 | 2023-03-31 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device… |
CVE-2022-47186 | High | 7.5 | 2023-09-28 | There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any… |
CVE-2022-47189 | High | 7.5 | 2023-03-31 | Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functio… |
CVE-2022-47188 | High | 7.5 | 2023-03-31 | There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a ba… |
CVE-2022-47187 | Medium | 5.3 | 2023-09-28 | There is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file wi… |
CVE-2022-47191 | Medium | 4.3 | 2023-03-31 | Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to esca… |