CVE-2023-2622

LOW

Hitachi Energy Modular Advanced Control for HVDC 7.10.0.0-7.17.x - Arbitrary File Read via InspectSetup RPC

Title source: llm
STIX 2.1

Description

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.

References (1)

Core 1

Scores

CVSS v3 2.7
EPSS 0.0036
EPSS Percentile 27.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-668
Status published
Products (1)
hitachienergy/modular_advanced_control_for_hvdc 7.10.0.0 - 7.18.0.0
Published Nov 01, 2023
Tracked Since Feb 18, 2026