Lucene search

[email protected]CVE-2023-34391

HistoryAug 31, 2023 - 4:15 p.m.

CVE-2023-34391

2023-08-3116:15:10

CWE-277

CWE-732

[email protected]

web.nvd.nist.gov

cve-2023-34391

insecure inherited permissions

schweitzer engineering laboratories

sel-5033

acselerator rtac software

windows

configuration file

cybersecurity

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths.

See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details.

This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000.

Affected configurations

NVD

Node

selincsel-5033_acselerator_real-time_automation_controllerRange<1.35.151.21000

AND

microsoftwindowsMatch-

CPENameOperatorVersion
selinc:sel-5033_acselerator_real-time_automation_controllerselinc sel-5033 acselerator real-time automation controllerlt1.35.151.21000

CPE	Name	Operator	Version
selinc:sel-5033_acselerator_real-time_automation_controller	selinc sel-5033 acselerator real-time automation controller	lt	1.35.151.21000

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "SEL-5033 AcSELerator RTAC Software",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "1.35.151.21000",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

dragos.com

selinc.com/support/security-notifications/external-reports/

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-34391

cvelist1 nvd1 prion1