CVE-2023-2264mediumCWE-20

CVE-2023-2264: falha de média gravidade em Schweitzer Engineering Laboratories SEL-411L

Improper input validition could lead to code injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SEL-411L

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4epss 0.2%
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
Schweitzer Engineering Laboratories · SEL-411L
CVEs relacionadas — Schweitzer Engineering Laboratories SEL-411L

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2267MEDIUMImproper input validation could lead to reflection injection attacksEPSS 0.4%CVE-2023-2266MEDIUMImproper neutralization of input during web page generation could lead to cross-site scripting based attacksEPSS 0.4%CVE-2023-2265MEDIUMImproper restriction of rendered UI layers or frames could lead to clickjacking attackEPSS 0.4%