CVE-2017-7928

Published: Aug 7, 2017Modified: May 13, 2026

10.0

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: NVD

Description

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.

Affected (12)

Products: Selinc: Sel 3620 Firmware, Sel 3622 Firmware

Selinc

2 products

Sel 3620 Firmware

Sel 3622 Firmware

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3620 Firmware	Version r202
Selinc Sel 3620 Firmware	Version r203-v1
Selinc Sel 3620 Firmware	Version r203-v
Selinc Sel 3620 Firmware	Version r203
Selinc Sel 3620 Firmware	Version r204-v1
Selinc Sel 3620 Firmware	Version r204

Running on/with	Platform Versions
Selinc Sel 3620	All versions

Configuration B

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3622 Firmware	Version r202
Selinc Sel 3622 Firmware	Version r203-v1
Selinc Sel 3622 Firmware	Version r203-v
Selinc Sel 3622 Firmware	Version r203
Selinc Sel 3622 Firmware	Version r204-v1
Selinc Sel 3622 Firmware	Version r204