CVE-2023-31152

VendorselincProductsel-2241 rtac module firmware, sel-3350 firmware, sel-3505-3 firmware, sel-3505 firmware, sel-3530-4 firmware, sel-3530 firmware, sel-3532 firmware, sel-3555 firmware, sel-3560e firmware, sel-3560s firmwareDiscoveredMay 10, 2023UpdatedNov 21, 2024

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details.

View graph Watch Export

CVSS v3.1

4 MEDIUM

EPSS

0.36%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityHIGH

Privileges RequiredHIGH

User InteractionREQUIRED

ScopeCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityNONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N

Connections

11 relationships

CWE-288

source

Timeline

disclosure → media coverage

May 10, 2023

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024