CVE-2022-47192 HIGH

CVE-2022-47192: Admin password reset via file upload vulnerability in Generex CS141

Vendor Generex
Product UPS CS141
Weakness CWE-20 · Input validation
Published March 31, 2023
Last update February 11, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.

Key dates

02Disclosure timeline

March 31, 2023 CVE published
February 11, 2025 Record updated