Hitachi Energy MACH System Software

• CVE-2023-2622 Low 2.7 Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read 0.4%
• CVE-2023-2621 Medium 6.5 The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system. This vulnerability stems from the use of an outdated ver 0.6%