CVE-2022-42457

Generex CS141 before 2.08 allows remote command execution by administrators via a web interface...

9.1 Critical

Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

3.22%Down 1.2 points since Oct 7, 2022

What each source reports

CVE List Score used 9.1

Record: CVE-2022-42457
CVSS 3.1: 9.1 CriticalCVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N
Updated: 2026-11-02

EUVDEUVD-2022-45530 9.1

Record: EUVD-2022-45530
CVSS 3.1: 9.1 CriticalCVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vv22-qqx8-q8jm 7.2

Generex CS141 before 2.08 allows remote command execution by administrators via a web interface...

Generex CS141 before 2.08 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).

Record: GHSA-vv22-qqx8-q8jm
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 9.1

Record: CVE-2022-42457
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

generex cs141 firmware

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-42457 is a critical vulnerability (CVSS 9.1) in Generex Cs141 Firmware, published October 6, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.22%, the 88th percentile. No source names a fixed version.