Skip to content
OpenAdvisories
High · 8.8 CVE-2022-47192 EUVD-2022-49967GHSA-x4qx-588r-pmgq

Admin password reset via file upload vulnerability in Generex CS141

Published Mar 31, 2023 · Updated Feb 11, 2025 · Assigned by INCIBE

Description

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.

Affected products

VendorProductAffectedFixed
Generex UPS CS141 2.06 – < 2.06 2.06

References