Hitachienergy Modular Advanced Control For Hvdc vulnerabilities

3 CVEs affecting Hitachienergy Modular Advanced Control For Hvdc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-2097, published 2024-03-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2621, published 2023-11-01. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system. This vulnerability stems from the use of an outdated…
CVE-2024-2097, published 2024-03-27. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the same system where…
CVE-2023-2622, published 2023-11-01. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to…