Lucene search

[email protected]CVE-2023-2267

HistoryNov 30, 2023 - 5:15 p.m.

CVE-2023-2267

2023-11-3017:15:08

NVD-CWE-Other

CWE-20

[email protected]

web.nvd.nist.gov

cve-2023-2267

improper input validation

sel-411l

reflection attacks

manual

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

7.2 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user.

See product Instruction Manual Appendix A dated 20230830 for more details.

CPENameOperatorVersion
selinc:sel-411l_firmwareselinc sel-411l firmwareltr118-v4
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr118-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr119-v5
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr119-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr120-v6
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr120-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr121-v3
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr121-v0
selinc:sel-411l_firmwareselinc sel-411l firmwareltr122-v3
selinc:sel-411l_firmwareselinc sel-411l firmwareeqr122-v0

CPE	Name	Operator	Version
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r118-v4
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r118-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r119-v5
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r119-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r120-v6
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r120-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r121-v3
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r121-v0
selinc:sel-411l_firmware	selinc sel-411l firmware	lt	r122-v3
selinc:sel-411l_firmware	selinc sel-411l firmware	eq	r122-v0

Rows per page:

1-10 of 221

References

selinc.com/support/security-notifications/external-reports/

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

7.2 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Related for CVE-2023-2267

prion1 cvelist1