CVE-2023-31175 Execution with Unnecessary Privileges

An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A and Appendix E dated 20230615 for more...

CVE-2023-31175

The CVE-2023-31175 issue affects SEL-5037 SEL Grid Configurator (pre-4.5.0.20). It is a privilege-related execution flaw that could allow an attacker to run arbitrary commands with the highest privileges on the host. Affected component is SEL Grid Configurator; root cause is improper privilege ha...

CVE-2023-31174 Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more...

CVE-2023-31174 Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more...

CVE-2023-31174

The CVE-2023-31174 entry describes a Cross-Site Request Forgery (CSRF) in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator. Affected product/version: SEL-5037 Grid Configurator prior to 4.5.0.20. Underlying issue: CSRF could enable an attacker to embed instructions that are exec...

CVE-2023-31173 Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before...

CVE-2023-31173

CVE-2023-31173 affects Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator for Windows, with the root cause identified as hard-coded credentials that enable authentication bypass. The issue applies to versions before 4.5.0.20. According to the connected sources, the vulnerability i...

CVE-2023-31172 Incomplete Filtering of Special Elements

An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

CVE-2023-31172

The CVE-2023-31172 issue affects Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software up to version 7.1.3.0. The vulnerability stems from incomplete filtering of certain elements, which could permit an attacker to embed commands that could be executed by an authorized device...

CVE-2023-31171

CVE-2023-31171 affects SEL-5030 acSELerator QuickSet Software up to 7.1.3.0. Root cause: Improper Neutralization of Special Elements in SQL commands (SQL injection) that could allow an attacker to cause arbitrary code execution on the engineering workstation. Exploitation vector described in conn...

CVE-2023-31171 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See...

CVE-2023-31171 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See...

CVE-2023-31170 Inclusion of Functionality from Untrusted Control Sphere

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and...

CVE-2023-31170

SEL-5030 acSELerator QuickSet Software is affected up to version 7.1.3.0 by CVE-2023-31170, described as an Inclusion of Functionality from Untrusted Control Sphere issue. The vulnerability could allow an attacker to embed instructions that could be executed by an authorized device operator. Conn...

CVE-2023-31169

Summary (CVE-2023-31169) : The issue is an improper handling of Unicode encoding in Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software, affecting versions up to 7.1.3.0. The vulnerability could allow an attacker to embed instructions that could be executed by an authorized...

CVE-2023-31169 Improper Handling of Unicode Encoding

An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

CVE-2023-31169 Improper Handling of Unicode Encoding

An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

CVE-2023-31168 Inclusion of Functionality from Untrusted Control Sphere

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and...

CVE-2023-31168

The CVE-2023-31168 issue affects Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software up to version 7.1.3.0. Root cause: Inclusion of Functionality from Untrusted Control Sphere, enabling an attacker to embed instructions that could be executed by an authorized device operat...

CVE-2023-31167

CVE-2023-31167 is a path traversal vulnerability in Schweitzer Engineering Laboratories’ SEL-5036 acSELerator Bay Screen Builder Software for Windows. Affected version range is before 1.0.49152.778. The issue stems from improper limitation of a pathname to a restricted directory, enabling relativ...