CVE-2023-28610

The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-03-23

Last modified

2025-02-26

Weaknesses

CWE-347

Affected products

• Stationguard (Omicronenergy)
• Stationscout (Omicronenergy)

References

• https://www.omicronenergy.com/en/support/product-security/
• https://www.omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-5.txt