Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2622

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.

Published

2023-11-01T03:15:07.867

Last Modified

2024-11-21T07:58:57.063

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 2.7 (LOW)

Weaknesses
  • Type: Secondary
    CWE-668
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hitachienergy modular_advanced_control_for_hvdc ≤ 7.18.0.0 Yes
References