Selinc vulnerabilities

We track 9 vulnerabilities in Selinc products across 14 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 30, 2023.

9vulnerabilities

2critical

7high

0exploited

8.7average CVSS score

Latest Selinc vulnerabilities

9.8 Critical severity
SEL-451: Improper Authentication
CVE-2023-34388Nov 30, 2023Schweitzer Engineering Laboratories
An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated
9.8 Critical severity
SEL-451: Insufficient Entropy
CVE-2023-31176Nov 30, 2023Schweitzer Engineering Laboratories
An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more d
7.8 High severity
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L…
CVE-2023-2264Nov 30, 2023Schweitzer Engineering Laboratories
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated
7.4 High severity
SEL-5030 acSELerator QuickSet Software: Incomplete Filtering of Special Elements
CVE-2023-31172Aug 31, 2023Schweitzer Engineering Laboratories
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction M
8.1 High severity
SEL-5036 acSELerator Bay Screen Builder Software: Improper Limitation of a Pathname to a Restricted Directory
CVE-2023-31167Aug 31, 2023Schweitzer Engineering Laboratories
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder s
8.8 High severity
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories…
CVE-2023-31161May 10, 2023Schweitzer Engineering Laboratories
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See
8.8 High severity
SEL-3505: Improper Authentication
CVE-2023-31152May 10, 2023Schweitzer Engineering Laboratories
An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more detai
8.8 High severity
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories…
CVE-2023-31149May 10, 2023Schweitzer Engineering LaboratoriesEPSS 1.09%
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for
8.8 High severity
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories…
CVE-2023-31148May 10, 2023Schweitzer Engineering LaboratoriesEPSS 1.09%
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for