Vulnerabilities > Generex

DATE CVE VULNERABILITY TITLE RISK
2023-09-28 CVE-2022-47186 Unrestricted Upload of File with Dangerous Type vulnerability in Generex Cs141 Firmware
There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version.
network
low complexity
generex CWE-434
critical
9.1
2023-09-28 CVE-2022-47187 Cross-site Scripting vulnerability in Generex Cs141 Firmware
There is a file upload XSS vulnerability in Generex CS141 below 2.06 version.
network
low complexity
generex CWE-79
6.1
2022-10-06 CVE-2022-42457 Unspecified vulnerability in Generex Cs141 Firmware
Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).
network
low complexity
generex
7.2
2022-06-13 CVE-2022-26041 Path Traversal vulnerability in Generex Rccmd 4.26
Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors.
network
low complexity
generex CWE-22
5.5
2020-04-27 CVE-2020-11420 Path Traversal vulnerability in multiple products
UPS Adapter CS141 before 1.90 allows Directory Traversal.
network
low complexity
abb generex CWE-22
4.0