CVE-2022-47186

High

Description

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.

SeverityHigh

CVSS7.5

Exploit probability—

ProductGenerex Cs141 Firmware

PublishedSep 28, 2023

First seenSep 28, 2023

Weakness typeCWE-434Unrestricted upload of dangerous file type

How to fix

Update

generex cs141_firmware2.06 or later

Vendor advisories

generex.de/support/changelogs/cs141/page:2

Affected products

Product	Affected versions	Fixed in
generex cs141_firmware	v < 2.06	2.06

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.