CVE-2023-34389

CVE-2023-34389 describes an unbounded resource allocation vulnerability in Schweitzer Engineering Laboratories (SEL) equipment, notably the SEL-451. The issue allows a remote authenticated attacker to render the device unavailable for an indefinite period by exhausting resources. The description ...

CVE-2023-34388

The CVE-2023-34388 entry concerns the Schweitzer Engineering Laboratories SEL-451 device with an Improper Authentication vulnerability that could let a remote, unauthenticated attacker hijack sessions and bypass authentication. Public details consistently reference the SEL-451 and relate the issu...

CVE-2023-31177

CVE-2023-31177 describes an XSS vulnerability in Schweitzer Engineering Laboratories SEL-451. The issue arises from improper input neutralization during web page generation, enabling an attacker to craft a link that could execute arbitrary code on a victim’s system. Reported references consistent...

CVE-2023-31177 Improper neutralizataion of input could lead to execution of arbitrary code

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for mor...

CVE-2023-31176

The CVE-2023-31176 entry concerns Schweitzer Engineering Laboratories SEL-451. The vulnerability arises from insufficient entropy in the device’s microprogram, enabling an unauthenticated remote attacker to brute-force session tokens and bypass authentication. Affected component: SEL-451 (protect...

PT-2023-7442 · Schweitzer Engineering Laboratories · Sel-451

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-451 affected versions not specified Description: The issue is related to insufficient entropy in the microprogram of the protective relay phase sequence of the Schweitzer Engineering Laboratories SEL-45...

Schweitzer Engineering Laboratories SEL-451 Cross-Site Scripting Vulnerability

Schweitzer Engineering Laboratories SEL-451 is a complete standalone system from Schweitzer Engineering Laboratories, USA. A security vulnerability exists in Schweitzer Engineering Laboratories SEL-451 that stems from the presence of a cross-site scripting vulnerability that could allow an attack...

Schweitzer Engineering Laboratories SEL-411L security vulnerabilities

The Schweitzer Engineering Laboratories SEL-451 is a complete stand-alone system from Schweitzer Engineering Laboratories, USA. An input validation error vulnerability exists in the Schweitzer Engineering Laboratories SEL-451, which can be exploited by an authenticated, remote attacker to cause a...

Schweitzer Engineering Laboratories SEL-411L Security Vulnerability

Schweitzer Engineering Laboratories SEL-411L is a state-of-the-art line differential protection, automation and control system from Schweitzer Engineering Laboratories, USA. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL-411L that stems from improper restrictions o...

PT-2023-7421

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL-411L affected versions not specified Description The issue is related to an Improper Input Validation vulnerability that could allow an attacker to perform reflection attacks against an authorized and...

PT-2023-18599 · Schweitzer Engineering Laboratories · Sel-411L

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-411L affected versions not specified Description: An improper input validation issue could allow a malicious actor to manipulate authorized users into clicking on a link, potentially leading to undesire...

PT-2023-23203 · Schweitzer Engineering Laboratories · Sel-451

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-451 affected versions not specified Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' could allow an attacker to craft a link that could execute arbitrar...

CVE-2023-2266: Improper Neutralization of Input During Web Page Generation

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

CVE-2023-2265: Improper Restriction of Rendered UI Layers or Frames

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...

CVE-2023-34390: Improper Input Validation

An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-34388: Improper Authentication

An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-31176: Insufficient Entropy

An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-2267: Improper Input Validation

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details...

CVE-2023-31177: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for mor...

PT-2023-7440 · Schweitzer Engineering Laboratories · Sel-451

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-451 affected versions not specified Description: The issue is related to insufficient input validation in the software of the SEL-451 protective relay, which could allow a remote authenticated attacker ...