CVE-2022-42457

Description

Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).

Weakness classification

• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Product, Vendor Advisory
• cve@mitre.org — Product, Vendor Advisory
• cve@mitre.org — Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory