Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistSELCVELIST:CVE-2023-31161
HistoryMay 10, 2023 - 7:24 p.m.

CVE-2023-31161 Improper Input Validation in Web Interface

2023-05-1019:24:03
CWE-20
SEL
www.cve.org
input validation
sel rtac
web interface
remote attack
resource usage
security bulletin

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects.

See SEL Service Bulletin dated 2022-11-15 for more details.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3532",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3555",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R143-V0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3560S",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3560E",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      },
      {
        "lessThan": "R147-V6",
        "status": "affected",
        "version": "R144-V2",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Web management interface"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "SEL-3350",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "R150-V2",
        "status": "affected",
        "version": "R148-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R149-V4",
        "status": "affected",
        "version": "R148-V0",
        "versionType": "custom"
      },
      {
        "lessThan": "R148-V7",
        "status": "affected",
        "version": "R148-V0",
        "versionType": "custom"
      }
    ]
  }
]

Related

cve 1
prion 1
nvd 1
nessus 1
cve
cve
CVE-2023-31161
2023-05-10 20:15:11
prion
prion
Input validation
2023-05-10 20:15:00
nvd
nvd
CVE-2023-31161
2023-05-10 20:15:11
nessus
nessus
Schweitzer Engineering Laboratories RTAC Improper Input Validation (CVE-2023-31161)
2023-06-05 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON
Related for CVELIST:CVE-2023-31161
cve1prion1nvd1nessus1