Generex vulnerabilities
We track 6 vulnerabilities in Generex products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2023.
Latest Generex vulnerabilities
- 9.1 Critical severity
UPS CS141: Unrestricted Upload of File with Dangerous Type
There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.
- 8.8 High severity
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file…
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.
- 8.8 High severity
UPS CS141: Unrestricted Upload of File with Dangerous Type
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges.
- 9.8 Critical severity
UPS CS141: Unrestricted Upload of File with Dangerous Type
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.
- 9.1 Critical severity
Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing…
Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device.
- 7.5 High severity
UPS CS141: Improper Link Resolution Before File Access
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.