Approved changes feed: RSS · Atom

cpe:2.3:a:hitachi_energy:mach_system_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHitachi Energy (57ae0a6c-1cbf-5100-9bbb-0f210f6013d6)
ProductMach System Software (5e670fb6-0651-59d5-9cb1-56a08e9432a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2622 vulnerable 2026-06-03 14:51:43.517656 Details available
LOW (2.7)
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.
Published: 2023-11-01T02:24:51.988Z
Updated: 2025-02-27T20:36:59.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2621 vulnerable 2026-06-03 14:51:43.515493 Details available
MEDIUM (6.5)
The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system. This vulnerability stems from the use of an outdated version of a third-party library, which is used to extract archives uploaded to McFeeder server. An authenticated malicious client can exploit this vulnerability by uploading a crafted ZIP archive via the network to McFeeder’s service endpoint.
Published: 2023-11-01T02:10:56.475Z
Updated: 2025-02-27T20:37:05.734Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.