Skip to content
OpenAdvisories
High · 8.8 CVE-2023-24837 EUVD-2023-28827GHSA-h2c8-rmv6-rvwc

HGiga PowerStation - Command Injection

Published Mar 27, 2023 · Updated Feb 19, 2025 · Assigned by twcert

Description

HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operation or disrupt service.

Affected products

VendorProductAffectedFixed
HGiga PowerStation unspecified – < x64.6.2.165 x64.6.2.165

References