Lucene search

[email protected]CVE-2023-2264

HistoryNov 30, 2023 - 5:15 p.m.

CVE-2023-2264

2023-11-3017:15:07

NVD-CWE-noinfo

CWE-20

[email protected]

web.nvd.nist.gov

cve-2023-2264

schweitzer engineering laboratories

sel-411l

input validation

vulnerability

unauthorized access

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON

An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior.

See product Instruction Manual Appendix A dated 20230830 for more details.

CPENameOperatorVersion
selinc:sel-411l_firmwareselinc sel-411l firmwareltr118-v4
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr118-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr119-v5
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr119-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr120-v6
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr120-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr121-v3
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr121-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr122-v3
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr122-v0

CPE	Name	Operator	Version
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r118-v4
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r118-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r119-v5
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r119-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r120-v6
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r120-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r121-v3
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r121-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r122-v3
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r122-v0

Rows per page:

1-10 of 221

References

selinc.com/support/security-notifications/external-reports/

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON

Related for CVE-2023-2264

cvelist1 prion1