Approved changes feed: RSS · Atom

cpe:2.3:a:generex:ups_cs141:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGenerex (2931790b-699d-5539-9333-267e1489e81c)
ProductUps Cs141 (7dd32b65-0eb8-5eb3-8aee-cab797b122d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47192 vulnerable 2026-06-08 05:50:39.985389 Admin password reset via file upload vulnerability in Generex CS141
HIGH (8.8)
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.
Published: 2023-03-31T00:00:00.000Z
Updated: 2025-02-11T19:02:51.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47191 vulnerable 2026-06-08 05:50:39.983335 Privilege Escalation via file upload vulnerability at Generex CS141
MEDIUM (4.3)
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges.
Published: 2023-03-31T00:00:00.000Z
Updated: 2025-02-11T19:03:20.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47190 vulnerable 2026-06-08 05:50:39.982681 RCE via file upload vulnerability in Generex CS141
CRITICAL (10)
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.
Published: 2023-03-31T00:00:00.000Z
Updated: 2025-02-11T19:08:06.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47189 vulnerable 2026-06-08 05:50:39.982269 DoS via file upload vulnerability at Generex CS141
HIGH (7.5)
Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device.
Published: 2023-03-31T00:00:00.000Z
Updated: 2025-02-12T14:51:18.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47188 vulnerable 2026-06-08 05:50:39.981834 Improper Input Validation in Generex CS141
HIGH (7.5)
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.
Published: 2023-03-31T00:00:00.000Z
Updated: 2025-02-12T14:52:45.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47187 vulnerable 2026-06-08 05:50:39.981299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47186 vulnerable 2026-06-08 05:50:39.979342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.