Improper access control

2017-08-0708:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.

CPENameOperatorVersion
sel-3620_firmwareeq202.0.114
sel-3620_firmwareeq203.0.114
sel-3620_firmwareeqr203-v
sel-3620_firmwareeqr203-v1
sel-3620_firmwareeq204.0.114
sel-3620_firmwareeqr204-v1
sel-3622_firmwareeq202.0.114
sel-3622_firmwareeq203.0.114
sel-3622_firmwareeqr203-v
sel-3622_firmwareeqr203-v1

Name	Operator	Version
sel-3620_firmware	eq	202.0.114
sel-3620_firmware	eq	203.0.114
sel-3620_firmware	eq	r203-v
sel-3620_firmware	eq	r203-v1
sel-3620_firmware	eq	204.0.114
sel-3620_firmware	eq	r204-v1
sel-3622_firmware	eq	202.0.114
sel-3622_firmware	eq	203.0.114
sel-3622_firmware	eq	r203-v
sel-3622_firmware	eq	r203-v1