Lucene search

K
nvd[email protected]NVD:CVE-2023-24838
HistoryMar 27, 2023 - 4:15 a.m.

CVE-2023-24838

2023-03-2704:15:09
CWE-200
CWE-306
web.nvd.nist.gov
1
hgiga powerstation
information leakage
vulnerability
remote attack
administrator credential
powerstation
secure shell
remote code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator’s credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.

Affected configurations

NVD
Node
hgigapowerstationMatch-
AND
hgigapowerstation_firmwareRange<x64.6.2.165

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

Related for NVD:CVE-2023-24838