CVE-2022-47186highCWE-434

CVE-2022-47186: falha de alta gravidade em Generex UPS CS141

Unrestricted Upload of File vulnerability in Generex CS141

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar UPS CS141

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.6%
There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
Generex · UPS CS141
CVEs relacionadas — Generex UPS CS141

No mesmo produto, das mais perigosas para as menos.

CVE-2022-47190CRITICALRCE via file upload vulnerability in Generex CS141EPSS 1.6%CVE-2022-47192HIGHAdmin password reset via file upload vulnerability in Generex CS141EPSS 1.3%CVE-2022-47191MEDIUMPrivilege Escalation via file upload vulnerability at Generex CS141EPSS 1.1%CVE-2022-47188HIGHImproper Input Validation in Generex CS141EPSS 0.9%CVE-2022-47189HIGHDoS via file upload vulnerability at Generex CS141EPSS 0.9%CVE-2022-47187MEDIUMFile upload XSS vulnerability in Generex CS141EPSS 0.4%