CVE-2023-31161
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects.
See SEL Service Bulletin dated 2022-11-15 for more details.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From r148-v0 to r150-v2 |
| Running on/with | Platform Versions |
|---|---|
Selinc Sel 3350 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From r143-v0 to r150-v2 |
| Running on/with | Platform Versions |
|---|---|
Selinc Sel 3532 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From r143-v0 to r150-v2 |
| Running on/with | Platform Versions |
|---|---|
Selinc Sel 3555 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From r144-v2 to r150-v2 |
| Running on/with | Platform Versions |
|---|---|
Selinc Sel 3560e | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From r144-v2 to r150-v2 |
| Running on/with | Platform Versions |
|---|---|
Selinc Sel 3560s | All versions |
References (4)
Source: security@selinc.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.