Detections
Analytics
Generex UPS Adapter CS141 Unrestricted Upload of File with Dangerous Type (CVE-2022-47190)
critical Tenable OT Security Plugin ID 503970
Synopsis
The remote OT asset is affected by a vulnerability.Description
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://www.generex.de/support/changelogs/cs141/2-12
Plugin Details
Severity: Critical
ID: 503970
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 11/13/2025
Updated: 11/13/2025
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/o:generex:cs141_firmware
Required KB Items: Tenable.ot/Generex
Exploit Ease: No known exploits are available
Patch Publication Date: 3/31/2023
Vulnerability Publication Date: 3/31/2023
Reference Information
CVE: CVE-2022-47190