← Back

CVE-2023-34389

nvd nist
Published: Nov 30, 2023Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more details.

Affected (12)

Selinc
1 product
Sel 451 Firmware
Configuration A
12 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Selinc
Sel 451 Firmware
From r315-v0 to r315-v4
Sel 451 Firmware
From r316-v0 to r316-v4
Sel 451 Firmware
From r317-v0 to r317-v4
Sel 451 Firmware
From r318-v0 to r318-v5
Sel 451 Firmware
From r320-v0 to r320-v3
Sel 451 Firmware
From r321-v0 to r321-v3
Sel 451 Firmware
From r322-v0 to r322-v3
Sel 451 Firmware
From r323-v0 to r323-v5
Sel 451 Firmware
From r324-v0 to r324-v4
Sel 451 Firmware
From r325-v0 to r325-v3
Sel 451 Firmware
Version r326-v0
Sel 451 Firmware
Version r327-v0
Running on/withPlatform Versions
Selinc
Sel 451
All versions

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

Source: security@selinc.com
Vendor Advisory
Source: security@selinc.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.