CVE-2023-2621

CVSS V2 None CVSS V3 None

Description

The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system. This vulnerability stems from the use of an outdated version of a third-party library, which is used to extract archives uploaded to McFeeder server. An authenticated malicious client can exploit this vulnerability by uploading a crafted ZIP archive via the network to McFeeder’s service endpoint.

Overview

CVE ID
CVE-2023-2621

Assigner
Hitachi Energy

Vulnerability Status
PUBLISHED

Published Version
2023-11-01T02:10:56.475Z

Last Modified Date
2023-11-01T02:10:56.475Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html

References

Reference URL	Reference Tags
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000177&languageCode=en&Preview=true

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-2621
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2621

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 21:49:16				Added to TrackCVE