Description
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Generex | UPS CS141 | 2.06 – < 2.06 | 2.06 |