What is CVE-2023-2622?

CVE-2023-2622 is a low-severity vulnerability in Hitachi Energy Mach System Software, classified under Exposure of Resource to Wrong Sphere. CVSS score: 2.7/10. Published 2023-11-01.

How severe is CVE-2023-2622?

Low severity. CVSS v3 base score is 2.7 out of 10.

Vulnerability in Hitachi Energy Mach System Software

CVE-2023-2622

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.

EPSS: 0.004 (28.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hitachi Energy Mach System Software — versions 7.10.0.0
Hitachienergy Modular_advanced_control_for_hvdc

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

cybersecurity@hitachienergy.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-2622?: CVE-2023-2622 is a low-severity vulnerability in Hitachi Energy Mach System Software, classified under Exposure of Resource to Wrong Sphere. CVSS score: 2.7/10. Published 2023-11-01.
How severe is CVE-2023-2622?: Low severity. CVSS v3 base score is 2.7 out of 10.