CWE
434
Advisory Published
Updated

CVE-2022-47186: Unrestricted Upload of File vulnerability in Generex CS141

First published: Thu Sep 28 2023(Updated: )

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.

Credit: cve-coordination@incibe.es cve-coordination@incibe.es

Affected SoftwareAffected VersionHow to fix
Generex Cs141 Firmware<2.06
Generex CS141

Remedy

This vulnerability, has been fixed by Generex team in CS141 version 2.06, released on April 2022.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2022-47186?

    CVE-2022-47186 is an unrestricted upload of file vulnerability in Generex CS141 below version 2.06. An attacker could upload and/or delete any type of file without any format restriction and without any authentication in the 'upload' directory.

  • What is the severity of CVE-2022-47186?

    The severity of CVE-2022-47186 is critical with a CVSS score of 9.1.

  • How does CVE-2022-47186 affect Generex CS141?

    CVE-2022-47186 affects Generex CS141 below version 2.06, allowing unrestricted file upload and deletion without authentication.

  • How can I fix CVE-2022-47186?

    To fix CVE-2022-47186, update Generex CS141 to version 2.06 or above, which addresses the unrestricted file upload vulnerability.

  • Is Generex CS141 version 2.06 vulnerable to CVE-2022-47186?

    No, Generex CS141 version 2.06 is not vulnerable to CVE-2022-47186 as it addresses the unrestricted file upload vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203