CVE-2023-24837: HGiga PowerStation - Command Injection
HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operation or disrupt service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-24837?
The severity of CVE-2023-24837 is critical as it allows authenticated remote attackers to execute arbitrary commands.
How do I fix CVE-2023-24837?
To mitigate CVE-2023-24837, users should update to the latest firmware version that addresses this vulnerability.
What type of access is required to exploit CVE-2023-24837?
An authenticated remote attacker with general user privileges can exploit CVE-2023-24837.
What can an attacker do by exploiting CVE-2023-24837?
Exploiting CVE-2023-24837 allows attackers to inject and execute arbitrary system commands, potentially disrupting services.
Which devices are affected by CVE-2023-24837?
CVE-2023-24837 affects HGiga PowerStation devices running the firmware version up to x64.6.2.165.