Input validation

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...

Input validation

An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-2267

CVE-2023-2267 describes an input validation error in the Schweitzer Engineering Laboratories SEL-411L (a line differential protection, automation and control system). The connected documents state that this vulnerability could allow an attacker to perform reflection attacks against an authorized ...

CVE-2023-2267 Improper input validation could lead to reflection injection attacks

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-2266

The CVE-2023-2266 entry concerns Schweitzer Engineering Laboratories SEL-411L, where an improper neutralization of input during web page generation enables cross-site scripting (XSS). The root cause is input handling during web page rendering, allowing an attacker to execute scripts in the contex...

CVE-2023-2266 Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

CVE-2023-2265 Improper restriction of rendered UI layers or frames could lead to clickjacking attack

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...

CVE-2023-2264

The CVE-2023-2264 entry concerns the Schweitzer Engineering Laboratories SEL-411L. Affected component: the SEL-411L system; root cause: improper input validation that could allow an attacker to cause authorized users to click a link and trigger undesired behavior. Documented impact is high for co...

CVE-2023-2264 Improper input validition could lead to code injection

An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-34390

The connected documents confirm an input validation error in Schweitzer Engineering Laboratories SEL-451 (stand-alone system) that could let a remote authenticated attacker cause a denial of service and lock out services. Root cause: input validation fault. Exploit details and a definitive remedi...

CVE-2023-34389 Allocation of resources without limits could lead to denial of service

An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more...

CVE-2023-34389

CVE-2023-34389 describes an unbounded resource allocation vulnerability in Schweitzer Engineering Laboratories (SEL) equipment, notably the SEL-451. The issue allows a remote authenticated attacker to render the device unavailable for an indefinite period by exhausting resources. The description ...

CVE-2023-34388

The CVE-2023-34388 entry concerns the Schweitzer Engineering Laboratories SEL-451 device with an Improper Authentication vulnerability that could let a remote, unauthenticated attacker hijack sessions and bypass authentication. Public details consistently reference the SEL-451 and relate the issu...

CVE-2023-31177 Improper neutralizataion of input could lead to execution of arbitrary code

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for mor...

CVE-2023-31177

CVE-2023-31177 describes an XSS vulnerability in Schweitzer Engineering Laboratories SEL-451. The issue arises from improper input neutralization during web page generation, enabling an attacker to craft a link that could execute arbitrary code on a victim’s system. Reported references consistent...

CVE-2023-31176

The CVE-2023-31176 entry concerns Schweitzer Engineering Laboratories SEL-451. The vulnerability arises from insufficient entropy in the device’s microprogram, enabling an unauthenticated remote attacker to brute-force session tokens and bypass authentication. Affected component: SEL-451 (protect...

Schweitzer Engineering Laboratories SEL-411L 安全漏洞

The Schweitzer Engineering Laboratories SEL-451 is a complete stand-alone system from Schweitzer Engineering Laboratories, USA. An input validation error vulnerability exists in the Schweitzer Engineering Laboratories SEL-451, which can be exploited by an authenticated, remote attacker to cause a...

PT-2023-7440 · Schweitzer Engineering Laboratories · Sel-451

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-451 affected versions not specified Description: The issue is related to insufficient input validation in the software of the SEL-451 protective relay, which could allow a remote authenticated attacker ...

PT-2023-7442 · Schweitzer Engineering Laboratories · Sel-451

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-451 affected versions not specified Description: The issue is related to insufficient entropy in the microprogram of the protective relay phase sequence of the Schweitzer Engineering Laboratories SEL-45...

PT-2023-18599 · Schweitzer Engineering Laboratories · Sel-411L

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-411L affected versions not specified Description: An improper input validation issue could allow a malicious actor to manipulate authorized users into clicking on a link, potentially leading to undesire...