CVE-2023-2267mediumCWE-20

CVE-2023-2267: falha de média gravidade em Schweitzer Engineering Laboratories SEL-411L

Improper input validation could lead to reflection injection attacks

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SEL-411L

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.4%
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
Schweitzer Engineering Laboratories · SEL-411L
CVEs relacionadas — Schweitzer Engineering Laboratories SEL-411L

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2266MEDIUMImproper neutralization of input during web page generation could lead to cross-site scripting based attacksEPSS 0.4%CVE-2023-2265MEDIUMImproper restriction of rendered UI layers or frames could lead to clickjacking attackEPSS 0.4%CVE-2023-2264MEDIUMImproper input validition could lead to code injectionEPSS 0.2%