CVE-2023-31162

Published: May 10, 2023Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details.

Affected (10)

Products: Selinc: Sel 2241 Rtac Module Firmware, Sel 3350 Firmware, Sel 3505 Firmware, Sel 3505 3 Firmware, Sel 3530 Firmware, Sel 3530 4 Firmware, Sel 3532 Firmware, Sel 3555 Firmware, Sel 3560e Firmware, Sel 3560s Firmware

Selinc

10 products

Sel 2241 Rtac Module Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 2241 Rtac Module Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 2241 Rtac Module	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3350 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3350	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3505 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3505	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3505 3 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3505 3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3530 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3530	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3530 4 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3530 4	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3532 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3532	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3555 Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3555	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3560e Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3560e	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Selinc Sel 3560s Firmware	From r149-v0 to r150-v2

Running on/with	Platform Versions
Selinc Sel 3560s	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://selinc.com/support/security-notifications/external-reports/

Source: security@selinc.com

Vendor Advisory

https://www.nozominetworks.com/blog/

Source: security@selinc.com

Third Party Advisory

https://selinc.com/support/security-notifications/external-reports/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.nozominetworks.com/blog/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.