CVE-2023-31174highCWE-352

CVE-2023-31174: falha de alta gravidade em Schweitzer Engineering Laboratories SEL-5037…

Cross-Site Request Forgery (CSRF)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SEL-5037 SEL Grid Configurator

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 0.2%
A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Produtos afetados
Schweitzer Engineering Laboratories · SEL-5037 SEL Grid Configurator
CVEs relacionadas — Schweitzer Engineering Laboratories SEL-5037…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-34392HIGHMissing Authentication for Critical FunctionEPSS 0.5%CVE-2023-31175HIGHExecution with Unnecessary PrivilegesEPSS 0.4%CVE-2023-31173HIGHUse of Hard-coded CredentialsEPSS 0.2%