Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
SelincSel-3560e Firmware

20 matches found

CVE
CVE•added 2023/05/10 8:15 p.m.•49 views

CVE-2023-2310

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service. See the ACSELERATOR RTAC SEL-5033 Software instruction...

6.8CVSS5.5AI score0.0057EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•45 views

CVE-2023-31149

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.See SEL Service Bulletin dated 2022-11-15 for more details.

9.1CVSS8.8AI score0.00781EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•43 views

CVE-2023-31164

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•38 views

CVE-2023-31151

An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack.See SEL Service Bulletin dated 2022-11-15 for more details.

4.7CVSS4.5AI score0.00177EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•38 views

CVE-2023-31163

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•37 views

CVE-2023-31160

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•36 views

CVE-2023-31158

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•34 views

CVE-2023-31148

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.See SEL Service Bulletin dated 2022-11-15 for more details.

9.1CVSS8.8AI score0.0112EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•34 views

CVE-2023-31166

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. Se...

4.3CVSS5AI score0.00151EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•33 views

CVE-2023-31157

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•32 views

CVE-2023-31150

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords.See SEL Service Bulletin dated 2022-11-15 for more details.

8CVSS6.6AI score0.00115EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•32 views

CVE-2023-31152

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass.See SEL Service Bulletin dated 2022-11-15 for more details.

8.8CVSS6.5AI score0.00029EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•32 views

CVE-2023-31153

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL S...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•32 views

CVE-2023-31154

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•31 views

CVE-2023-31162

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more det...

4.8CVSS4.5AI score0.00028EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•31 views

CVE-2023-31165

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•30 views

CVE-2023-31156

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•30 views

CVE-2023-31159

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•29 views

CVE-2023-31155

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL ...

5.4CVSS5.3AI score0.00074EPSS
CVE
CVE•added 2023/05/10 8:15 p.m.•27 views

CVE-2023-31161

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 f...

8.8CVSS7AI score0.00232EPSS