CVE-2023-31161: Improper Input Validation in Web Interface
First published: Wed May 10 2023(Updated: )
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 for more details.
Credit: security@selinc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Selinc Sel-3350 Firmware | >=r148-v0<r150-v2 | |
| Selinc Sel-3350 Firmware | ||
| Selinc Sel-3532 | >=r143-v0<r150-v2 | |
| Selinc Sel-3532 Firmware | ||
| Selinc Sel-3555 Firmware | >=r143-v0<r150-v2 | |
| Selinc Sel-3555 Firmware | ||
| Selinc Sel-3560e Firmware | >=r144-v2<r150-v2 | |
| Selinc Sel-3560e Firmware | ||
| Selinc Sel-3560s | >=r144-v2<r150-v2 | |
| Selinc SEL-3560S |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-31161.
What is the severity level of CVE-2023-31161?
The severity level of CVE-2023-31161 is high.
What is the affected software of CVE-2023-31161?
The affected software of CVE-2023-31161 is the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface.
What potential effects can an attacker achieve with CVE-2023-31161?
An attacker can use internal resources, allowing a variety of potential effects with CVE-2023-31161.
Where can I find more information about CVE-2023-31161?
You can find more information about CVE-2023-31161 at the SEL Service Bulletin dated 2022-11-15 and at the Nozomi Networks blog.
- agent/references
- agent/type
- agent/title
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/selinc
- canonical/selinc sel-3350 firmware
- version/selinc sel-3350 firmware/r148-v0
- canonical/selinc sel-3532
- version/selinc sel-3532/r143-v0
- canonical/selinc sel-3532 firmware
- canonical/selinc sel-3555 firmware
- version/selinc sel-3555 firmware/r143-v0
- canonical/selinc sel-3560e firmware
- version/selinc sel-3560e firmware/r144-v2
- canonical/selinc sel-3560s
- version/selinc sel-3560s/r144-v2