CVE-2022-47188

CVE-2022-47188 is an arbitrary file reading vulnerability affecting Generex UPS CS141 devices running firmware versions below 2.06. An unauthenticated attacker can exploit this by uploading a malicious backup file containing a symlink to sensitive system files, such as /etc/shadow, using default credentials. This vulnerability carries a CVSS score of 7.5 (High) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, allowing for unauthorized access to critical system information. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.