Schweitzer Engineering Laboratories Axion PLC Detection

Binary data 755323.prm...

Schweitzer Engineering Laboratories Pump Automation Controller PLC Detection

Binary data 755334.prm...

Schweitzer Engineering Laboratories Unmanaged 24-Port Ethernet Switch Detection

Binary data 755349.prm...

Schweitzer Engineering Laboratories Communications Processor Communications Processor Detection

Binary data 755331.prm...

Schweitzer Engineering Laboratories Programmable Automation Controller PLC Detection

Binary data 755333.prm...

CVE-2019-9058

An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the selgroups parameter that leads to authenticated object injection...

PT-2019-19342 · Cms Made Simple · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.8 Description: An issue was discovered in the administrator page "admin/changegroupperm.php" where it is possible to send a crafted value in the sel groups parameter, leading to authenticated object injection...

Design/Logic Flaw

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution...

CVE-2018-10604

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution...

CVE-2018-10604

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution...

CVE-2018-10604

CVE-2018-10604 affects SEL Compass 3.0.5.1 and earlier, where incorrect default permissions grant all users full access to the Compass directory, enabling modification or overwriting of files and potential privilege escalation or code execution. The issue is documented across multiple sources (NV...

CVE-2018-10604: Incorrect Default Permissions

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution...

CVE-2018-10608: Uncontrolled Resource Consumption

SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP server, which may cause denial of service via 100% CPU utilization. Restart of the application is required...

CVE-2018-10600: Improper Restriction of XML External Entity Reference

SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution in certain situations on specific platforms, and denial of service attacks...

PT-2018-9999

Name of the Vulnerable Software and Affected Versions: SEL AcSELerator Architect versions 2.2.24.0 and prior Description: The issue occurs when the AcSELerator Architect FTP client connects to a malicious FTP server, potentially causing denial of service via 100% CPU utilization, which requires a...

PT-2018-9995

Name of the Vulnerable Software and Affected Versions: SEL Compass versions 3.0.5.1 and prior Description: The issue allows all users full access to the SEL Compass directory, which may enable modification or overwriting of files within the Compass installation folder. This could result in...

PT-2018-9991

Name of the Vulnerable Software and Affected Versions: SEL AcSELerator Architect versions 2.2.24.0 and prior Description: The issue allows unsanitized input to be passed to the XML parser, which may lead to disclosure and retrieval of arbitrary data, arbitrary code execution in certain situations...

SEL Compass Elevation of Privilege Vulnerability

SEL Compass is an application for managing and updating SEL products from Schweitzer Engineering Laboratories SEL, USA. An elevation of privilege vulnerability exists in SEL Compass 3.0.5.1 and earlier versions, which arises from the program failing to properly set access rights and can be...

Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/Low skill level to exploit/Public exploits are available for these vulnerabilities Vendor: Schweitzer Engineering Laboratories, Inc. SEL Equipment: Compass and AcSELerator Architect Vulnerabilities: Incorrect Default Permissions,...

Improper access control

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...