Skip to content
OpenAdvisories
Critical · 10.0 CVE-2022-47190 EUVD-2022-49965GHSA-9p85-r5r3-72xv

RCE via file upload vulnerability in Generex CS141

Published Mar 31, 2023 · Updated Feb 11, 2025 · Assigned by INCIBE

Description

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.

Affected products

VendorProductAffectedFixed
Generex UPS CS141 2.06 – < 2.06 2.06

References