Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2023-34388

Improper authentication could lead to session hijacking

An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-451 Sel-451 Firmware
CVE-2023-34389

Allocation of resources without limits could lead to denial of service

An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-451 Sel-451 Firmware
CVE-2023-34390

Improper input validation could lead to denial of service

An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-451 Sel-451 Firmware
CVE-2023-31177

Improper neutralizataion of input could lead to execution of arbitrary code

An Improper Neutralization of Input During Web Page Generation  ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-451 Sel-451 Firmware
CVE-2023-31176

Insufficient entropy vulnerability could lead to authentication bypass

An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication.  See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Selinc
Products
Sel-451 Sel-451 Firmware