CVE-2023-2310: falha de média gravidade em Schweitzer Engineering Laboratories SEL-3505
Channel Accessible by Non-Endpoint
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.5%
A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.
See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Produtos afetados
Schweitzer Engineering Laboratories · SEL-3505Schweitzer Engineering Laboratories · SEL-3530Schweitzer Engineering Laboratories, Inc. · SEL-2241 RTAC moduleSchweitzer Engineering Laboratories, Inc. · SEL-3350Schweitzer Engineering Laboratories, Inc. · SEL-3505-3Schweitzer Engineering Laboratories, Inc. · SEL-3530-4Schweitzer Engineering Laboratories, Inc. · SEL-3532Schweitzer Engineering Laboratories, Inc. · SEL-3555Schweitzer Engineering Laboratories, Inc. · SEL-3560ESchweitzer Engineering Laboratories, Inc. · SEL-3560SCVEs relacionadas — Schweitzer Engineering Laboratories SEL-3505
No mesmo produto, das mais perigosas para as menos.
CVE-2023-31149CRITICALImproper Input Validation in Web InterfaceEPSS 1.1%CVE-2023-31148CRITICALImproper Input Validation in Web InterfaceEPSS 1.1%CVE-2023-31166MEDIUMImproper Limitation of a Pathname to a Restricted DirectoryEPSS 0.6%CVE-2023-31162MEDIUMImproper Input Validation in Web InterfaceEPSS 0.5%CVE-2023-31150HIGHStoring Passwords in a Recoverable FormatEPSS 0.5%CVE-2023-31165MEDIUMImproper Neutralization of Input During Web Page GenerationEPSS 0.4%