CVE-2022-47190 | Generex UPS CS141 below 2.06 version, could allow a remote a… | CVSS 10.0 CRITICAL

Description

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.

Metadata

CVE ID: CVE-2022-47190
State: PUBLISHED
Assigner: INCIBE
Reserved: 2022-12-12 00:00 UTC
Published: 2023-03-31 00:00 UTC
Last updated: 2025-02-11 19:08 UTC
Primary CWE: CWE-20
CWE-20 Improper Input Validation
Vendor / Product: Generex / UPS CS141
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Generex	UPS CS141	—	2.06 < 2.06

Weakness (CWE)

CWE	Source	Description
CWE-20	cna	CWE-20 Improper Input Validation

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (3)