CVE-2023-2310: medium-severity vulnerability in Schweitzer Engineering Laboratories SEL-3505
Channel Accessible by Non-Endpoint
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.5%
A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.
See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected products
Schweitzer Engineering Laboratories · SEL-3505Schweitzer Engineering Laboratories · SEL-3530Schweitzer Engineering Laboratories, Inc. · SEL-2241 RTAC moduleSchweitzer Engineering Laboratories, Inc. · SEL-3350Schweitzer Engineering Laboratories, Inc. · SEL-3505-3Schweitzer Engineering Laboratories, Inc. · SEL-3530-4Schweitzer Engineering Laboratories, Inc. · SEL-3532Schweitzer Engineering Laboratories, Inc. · SEL-3555Schweitzer Engineering Laboratories, Inc. · SEL-3560ESchweitzer Engineering Laboratories, Inc. · SEL-3560SRelated CVEs — Schweitzer Engineering Laboratories SEL-3505
In the same product, most dangerous first.
CVE-2023-31149CRITICALImproper Input Validation in Web InterfaceEPSS 1.1%CVE-2023-31148CRITICALImproper Input Validation in Web InterfaceEPSS 1.1%CVE-2023-31166MEDIUMImproper Limitation of a Pathname to a Restricted DirectoryEPSS 0.6%CVE-2023-31162MEDIUMImproper Input Validation in Web InterfaceEPSS 0.5%CVE-2023-31150HIGHStoring Passwords in a Recoverable FormatEPSS 0.5%CVE-2023-31165MEDIUMImproper Neutralization of Input During Web Page GenerationEPSS 0.4%