Описание
There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.
Ссылки
- Release Notes
- Not Applicable
- Release Notes
- Not Applicable
Уязвимые конфигурации
Конфигурация 1Версия до 2.06 (исключая)
Одновременно
cpe:2.3:o:generex:cs141_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:generex:cs141:-:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00092
Низкий
7.5 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-434
CWE-434
Связанные уязвимости
CVSS3: 7.5
github
больше 2 лет назад
There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.
EPSS
Процентиль: 26%
0.00092
Низкий
7.5 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-434
CWE-434