Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 19

Export CSV
CVE-2023-2310

Channel Accessible by Non-Endpoint

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service. See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31148

Improper Input Validation in Web Interface

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 9.1 Critical EPSS 1.1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31149

Improper Input Validation in Web Interface

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 9.1 Critical EPSS 1.1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31150

Storing Passwords in a Recoverable Format

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31166

Improper Limitation of a Pathname to a Restricted Directory

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31165

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31164

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31163

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31162

Improper Input Validation in Web Interface

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31160

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31159

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31158

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31157

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31156

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31155

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31154

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31153

Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31152

Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more
CVE-2023-31151

Improper Certificate Validation

An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack. See SEL Service Bulletin dated 2022-11-15 for more details.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-2241 Rtac Module Sel-2241 Rtac Module Firmware Sel-3350 and 17 more