{"id":"CVE-2023-24838","aliases":["EUVD-2023-28828","GHSA-qh97-v4qr-2c8p"],"status":"published","title":"HGiga PowerStation - Information Leakage","description":"HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.011,"percentile":0.65935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-306"],"published":"2023-03-27T00:00:00Z","modified":"2026-06-17T05:39:58Z","products":[{"vendor":"hgiga","product":"powerstation"},{"vendor":"hgiga","product":"powerstation_firmware"}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-6957-d8f67-1.html","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24838"},{"url":"https://github.com/advisories/GHSA-qh97-v4qr-2c8p"}],"sources":{"cve":[{"id":"CVE-2023-24838","title":"HGiga PowerStation - Information Leakage","description":"HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.","status":"published","published":"2023-03-27T00:00:00Z","modified":"2025-02-19T16:27:22.923Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:27.006218Z"}],"euvd":[{"id":"EUVD-2023-28828","description":"HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.","status":"published","published":"2023-03-27T00:00:00Z","modified":"2025-02-19T16:27:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:27.295607Z"}],"ghsa":[{"id":"GHSA-qh97-v4qr-2c8p","title":"HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker...","description":"HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator’s credential, resulting in performing arbitrary system operation or disrupt service.","status":"published","published":"2023-07-06T19:24:12Z","modified":"2023-07-06T19:24:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:41.037164Z"}],"nvd":[{"id":"CVE-2023-24838","description":"HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.","status":"published","published":"2023-03-27T04:15:09.917Z","modified":"2026-06-17T05:39:58.58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-200","CWE-306"],"updated_at":"2026-11-02T14:07:50.908252Z"}]}}