by Kastro
Paper/Archive/CVE-2022-42457

CVE-2022-42457

mitre — Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxse…

EPSS 3%CVSS 9.1
critical.is priorityof 100
45
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 88.2.882 × 2017.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.1CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N

References

refgithub.com/hubertfarnsworth12/Generex-CS141-Authenticated-Remote-Command-Executionrefgenerex.de/products/upsrefgenerex.de/support/downloads/ups/cs141refgenerex.de/support/downloads/ups/cs141/updaterefgithub.dev/hubertfarnsworth12/Generex-CS141-Authenticated-Remote-Command-Execution