CVE-2022-47188: Generex CS141 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.

Affected products

• Generex CS141 Firmware: before 2.06 (fixed in 2.06)

Published 2023-03-31. Last modified 2026-06-17.