CVE-2023-31162: medium-severity vulnerability in Schweitzer Engineering Laboratories SEL-2241…
Improper Input Validation in Web Interface
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in the SEL RTAC web interface fails to properly validate user input, allowing an authenticated attacker to modify configuration files without proper authorization. This could lead to unauthorized changes to critical system settings.
Improper input validation in the RTAC web interface permits a remote authenticated attacker to bypass input sanitization controls and arbitrarily modify configuration files. The vulnerability requires prior authentication and affects the integrity of system configurations, potentially enabling unauthorized reconfiguration of industrial control settings.
In the same product, most dangerous first.