Hgiga Powerstation vulnerabilities

CVE-2023-24838 [CRITICAL] CWE-200 CVE-2023-24838: HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker ca HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.

CVE-2023-24837 [HIGH] CWE-78 CVE-2023-24837: HGiga PowerStation remote management function has insufficient filtering for user input. An authenti HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operation or disrupt service.

CVE-2025-3364 [MEDIUM] CWE-250 CVE-2025-3364: The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers wit The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system.