CVE-2022-47190

moderate-risk
Published 2023-03-31

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.

Do I need to act?

~
2.9% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
10
CVSS 10.0/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Cs141 Firmware

Affected Vendors

Generex

References (6)

Vendor Advisory https://www.generex.de/support/changelogs/cs141/2-12
Vendor Advisory https://www.generex.de/support/changelogs/cs141/page:2
Third Party Advisory https://www.incibe-cert.es/en/early-warning/ics-advisories/update-03032023-multi...
Vendor Advisory https://www.generex.de/support/changelogs/cs141/2-12
Vendor Advisory https://www.generex.de/support/changelogs/cs141/page:2
Third Party Advisory https://www.incibe-cert.es/en/early-warning/ics-advisories/update-03032023-multi...
44
/ 100
moderate-risk
Severity 33/34 · Critical
Exploitability 6/34 · Minimal
Exposure 5/34 · Minimal