Lucene search

[email protected]CVE-2023-31148

HistoryMay 10, 2023 - 8:15 p.m.

CVE-2023-31148

2023-05-1020:15:09

CWE-20

[email protected]

web.nvd.nist.gov

vulnerability

input validation

sel rtac

remote code execution

cve-2023-31148

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.0%

JSON

An Improper Input Validation vulnerability

in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.
See SEL Service Bulletin dated 2022-11-15 for more details.

Affected configurations

NVD

Node

selincsel-2241_rtac_moduleMatch-

AND

selincsel-2241_rtac_module_firmwareRanger132-v0–r150-v2

Node

selincsel-3350Match-

AND

selincsel-3350_firmwareRanger148-v0–r150-v2

Node

selincsel-3505_firmwareRanger132-v0–r150-v2

AND

selincsel-3505Match-

Node

selincsel-3505-3_firmwareRanger132-v0–r150-v2

AND

selincsel-3505-3Match-

Node

selincsel-3530Match-

AND

selincsel-3530_firmwareRanger132-v0–r150-v2

Node

selincsel-3530-4Match-

AND

selincsel-3530-4_firmwareRanger132-v0–r150-v2

Node

selincsel-3532Match-

AND

selincsel-3532_firmwareRanger132-v0–r150-v2

Node

selincsel-3555Match-

AND

selincsel-3555_firmwareRanger134-v0–r150-v2

Node

selincsel-3560eMatch-

AND

selincsel-3560e_firmwareRanger144-v2–r150-v2

Node

selincsel-3560sMatch-

AND

selincsel-3560s_firmwareRanger144-v2–r150-v2

CPENameOperatorVersion
selinc:sel-2241_rtac_module_firmwareselinc sel-2241 rtac module firmwareltr150-v2

CPE	Name	Operator	Version
selinc:sel-2241_rtac_module_firmware	selinc sel-2241 rtac module firmware	lt	r150-v2

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3505",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3505-3",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3530",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3530-4",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3532",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3555",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R134-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R134-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R134-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R134-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3560S",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3560E",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-2241 RTAC module",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R132-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3350",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R148-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R148-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R148-V0",
        "versionType": "custom"
      }
    ]
  }
]