CVE-2017-7928

The CVE-2017-7928 issue affects SEL-3620 and SEL-3622 Security Gateway devices (firmware R202, R203, R203-V1/V2, R204, R204-V1). Root cause: improper access control when NAT port forwarding is configured, potentially permitting unauthorized communications to downstream devices. Impact: could enab...

CVE-2017-7928

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...

PT-2017-18003

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway versions R202, R203, R203-V1, R203-V2, R204, R204-V1 Description An issue with improper access control was found, which may allow unauthorized communications to...

CVE-2017-7928: Improper Access Control

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...

Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability

Overview This advisory provides mitigation details for a vulnerability affecting the Schweitzer Engineering Laboratories SEL AcSELerator QuickSet software. Independent researcher Michael Toecker of Digital Bond has identified an improper authorization vulnerability in the SEL AcSELerator...

CVE-2013-2792

CVE-2013-2792 affects Schweitzer Engineering Laboratories SEL-2241, SEL-3505, and SEL-3530 RTAC master devices. It arises from improper input validation of DNP3 over TCP, allowing remote attackers to cause an infinite loop and denial of service. Public references in NVD/NIST report a base score o...

CVE-2013-2798

CVE-2013-2798 affects SEL-2241, SEL-3505, and SEL-3530 RTAC master devices. The vulnerability is due to improper input validation that can cause an infinite loop when processing crafted input over a serial line, potentially crashing the device. The issue has both serial (local) and IP-based varia...

PT-2013-3935

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a crafted DNP3 TCP packet...

PT-2013-3938

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices Description The issue allows physically proximate attackers to cause a denial of service, resulting in an infinite loop, via crafted input over a seri...

CVE-2013-2792: Improper Input Validation

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet...

CVE-2013-2798: Improper Input Validation

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow physically proximate attackers to cause a denial of service infinite loop via crafted input over a serial line...

CVE-2013-0665

Schweitzer Engineering Laboratories SEL AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations...

Code injection

Schweitzer Engineering Laboratories SEL AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations...

CVE-2013-0665

Schweitzer Engineering Laboratories SEL AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations...

CVE-2013-0665

The CVE affects SEL AcSELerator QuickSet prior to version 5.12.0.1. Root cause: weak permissions in the Program Files directory permit any local user to replace executables, enabling privilege escalation when the application runs. Impact per sources: local privilege compromise affecting the Quick...

CVE-2013-0665: Undefined Security Weakness

Schweitzer Engineering Laboratories SEL AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations...

Schweitzer Engineering Laboratories (SEL) Default telnet Account Detection (SCADA)

Binary data 6269.prm...

CVE-2010-1551: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the sel parameter...

CVE-2010-1550: Use of Externally-Controlled Format String

Format string vulnerability in ovetdemandpoll.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter...

Directory traversal

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...