CVE-2022-47192

Description

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.

Weakness classification

• cve-coordination@incibe.es: CWE-20
• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• cve-coordination@incibe.es — Vendor Advisory
• cve-coordination@incibe.es — Vendor Advisory
• cve-coordination@incibe.es — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory