by Kastro
Paper/Archive/CVE-2023-24838

CVE-2023-24838

HGiga PowerStation — HGiga PowerStation - Information Leakage

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.7.657 × 2013.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.

Affected

ProductAffectedFixed inSource
PowerStationunspecified – < x64.6.2.165x64.6.2.165CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reftwcert.org.tw/tw/cp-132-6957-d8f67-1.html