Schweitzer Engineering Laboratories vulnerabilities
We track 13 vulnerabilities in Schweitzer Engineering Laboratories products across 17 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2025.
Latest Schweitzer Engineering Laboratories vulnerabilities
- 7.4 High severity
SEL-5037 Grid Configurator: Origin Validation Error
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected
- 9.8 Critical severity
SEL-451: Improper Authentication
An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated
- 9.8 Critical severity
SEL-451: Insufficient Entropy
An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more d
- 7.8 High severity
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L…
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated
- 8.8 High severity
SEL-5037 SEL Grid Configurator: Missing Authentication for Critical Functionality
A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual
- 9.8 Critical severity
SEL-5037 SEL Grid Configurator: Improper Privilege Management
An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A an
- 8.4 High severity
SEL-5037 SEL Grid Configurator: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-
- 7.4 High severity
SEL-5030 acSELerator QuickSet Software: Incomplete Filtering of Special Elements
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction M
- 8.1 High severity
SEL-5036 acSELerator Bay Screen Builder Software: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder s
- 8.8 High severity
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories…
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See
- 8.8 High severity
SEL-3505: Improper Authentication
An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more detai
- 8.8 High severity
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories…
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for
- 8.8 High severity
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories…
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for