CVE-2017-7928

2017-08-0708:00:00

CWE-284

icscert

www.cve.org

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.

CNA Affected

[
  {
    "product": "Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622"
      }
    ]
  }
]