CVE-2022-47188
Last modified
CVE-2022-47188 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.. EPSS estimates a 0.91% chance of exploitation in the next 30 days.
Description
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Generex | Cs141 Firmware | < 2.06 |
References
- https://www.generex.de/support/changelogs/cs141/2-12Vendor Advisory
- https://www.generex.de/support/changelogs/cs141/page:2Vendor Advisory
- https://www.generex.de/support/changelogs/cs141/2-12Vendor Advisory
- https://www.generex.de/support/changelogs/cs141/page:2Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-47188?
How severe is CVE-2022-47188?
How do I fix CVE-2022-47188?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-47182Missing Authorization vulnerability in Wpexpertsio APIExpert…5.3
- CVE-2022-47183Cross-Site Request Forgery (CSRF) vulnerability in StylistWP…8.8
- CVE-2022-47184Exposure of Sensitive Information to an Unauthorized Actor v…7.5
- CVE-2022-47185Improper input validation vulnerability on the range header …7.5
- CVE-2022-47186There is an unrestricted upload of file vulnerability in Gen…9.1
- CVE-2022-47187There is a file upload XSS vulnerability in Generex CS141 be…6.1
- CVE-2022-47189Generex UPS CS141 below 2.06 version, allows an attacker tou…9.1
- CVE-2022-4719Business Logic Errors in GitHub repository ikus060/rdiffweb …9.8
- CVE-2022-47190Generex UPS CS141 below 2.06 version, could allow a remote a…9.8
- CVE-2022-47191Generex UPS CS141 below 2.06 version, could allow a remote a…8.8
- CVE-2022-47192Generex UPS CS141 below 2.06 version, could allow a remote a…8.8
- CVE-2022-47194An insecure default vulnerability exists in the Post Creatio…5.4
Are you affected by CVE-2022-47188?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST