PatchTheCVE: cs141 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-47192: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modifhttps://patchthecve.com/cve/CVE-2022-47192.htmlhttps://patchthecve.com/cve/CVE-2022-47192.htmlWed, 17 Jun 2026 05:13:14 +0000HIGH 8.8: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users.json" to the web server of the device, allowing him to replace the administrator password.CVE-2022-47191: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a filhttps://patchthecve.com/cve/CVE-2022-47191.htmlhttps://patchthecve.com/cve/CVE-2022-47191.htmlWed, 17 Jun 2026 05:13:14 +0000MEDIUM 4.3: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges.CVE-2022-47190: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webhttps://patchthecve.com/cve/CVE-2022-47190.htmlhttps://patchthecve.com/cve/CVE-2022-47190.htmlWed, 17 Jun 2026 05:13:14 +0000CRITICAL 10.0: Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.CVE-2022-47189: Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect confhttps://patchthecve.com/cve/CVE-2022-47189.htmlhttps://patchthecve.com/cve/CVE-2022-47189.htmlWed, 17 Jun 2026 05:13:14 +0000HIGH 7.5: Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration, in order to disrupt the normal functionality of the device.CVE-2022-47188: There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 versionhttps://patchthecve.com/cve/CVE-2022-47188.htmlhttps://patchthecve.com/cve/CVE-2022-47188.htmlWed, 17 Jun 2026 05:13:13 +0000HIGH 7.5: There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.CVE-2022-42457: Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches https://patchthecve.com/cve/CVE-2022-42457.htmlhttps://patchthecve.com/cve/CVE-2022-42457.htmlWed, 17 Jun 2026 05:04:57 +0000CRITICAL 9.1: Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).