Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability

🗓️ 22 Dec 2013 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 37 Views

Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet software has an improper authorization vulnerability allowing unauthorized users to read or modify files, potentially impacting application availability and allowing access to executable files

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2013-0665	21 Mar 201314:00	–	cve
Cvelist	CVE-2013-0665	21 Mar 201314:00	–	cvelist
EUVD	EUVD-2013-0676	7 Oct 202500:30	–	euvd
NVD	CVE-2013-0665	21 Mar 201314:55	–	nvd
Prion	Code injection	21 Mar 201314:55	–	prion
RedhatCVE	CVE-2013-0665	22 May 202503:30	–	redhatcve
Tenable Nessus	SEL (CVE-2013-0665) (deprecated)	7 Feb 202200:00	–	nessus

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2013/icsa-13-079-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-13-079-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

22 Dec 2013 07:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 26.2

EPSS0.01186