go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

HGiga PowerStation - Chroot Escape

TVN ID TVN-202504004
CVE ID CVE-2025-3364
CVSS 6.7 (Medium)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products PowerStation firmware before version x64.6.2.213
Description The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system.
Solution Update firmware to version x64.6.2.213 or later, then reboot PowerStation.
Credit Fi Liu(CHT Security)
Public Date 2025-04-07
Top