Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25909 EUVD-2023-29797GHSA-5wfp-vx7w-jx9r

HGiga Inc. OAKlouds - Arbitrary File Upload

Published Mar 27, 2023 · Updated Feb 19, 2025 · Assigned by twcert

Description

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.

Affected products

VendorProductAffectedFixed
HGIGA HGiga OAKlouds 2, 3 —

References