{"id":"CVE-2023-2622","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-2622","generatedAt":"2026-10-25T06:01:38.036Z","title":"Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint.","description":"\nAuthenticated clients can read arbitrary files on the MAIN Computer\nsystem using the remote procedure call (RPC) of the InspectSetup\nservice endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.\n\n","published":"2023-11-01T03:15:08.000Z","lastModified":"2026-06-17T05:53:02.000Z","status":"Modified","sourceIdentifier":"cybersecurity@hitachienergy.com","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-668"],"affected":["hitachienergy/modular advanced control for hvdc"],"epss":{"score":0.00357,"percentile":0.28336,"date":"2026-10-24","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000177&languageCode=en&Preview=true","tags":["Vendor Advisory"],"source":"cybersecurity@hitachienergy.com"},{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000177&languageCode=en&Preview=true","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-2622","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}