CVE-2023-31170: falha de média gravidade em Schweitzer Engineering Laboratories SEL-5030…
Inclusion of Functionality from Untrusted Control Sphere
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.3%
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.
See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.
This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
CVEs relacionadas — Schweitzer Engineering Laboratories SEL-5030…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-31169MEDIUMImproper Handling of Unicode EncodingEPSS 0.4%CVE-2023-31168MEDIUM Inclusion of Functionality from Untrusted Control SphereEPSS 0.4%CVE-2023-31172MEDIUMIncomplete Filtering of Special ElementsEPSS 0.3%CVE-2023-31171MEDIUMImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')EPSS 0.3%CVE-2025-48018HIGHDeserialization of Untrusted DataEPSS 0.2%