CVE-2022-47188CWE-20

Improper Input Validation in Generex CS141

High · published March 31, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00914 · 59.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    Improper Input Validation in Generex CS141
    cvelistv5