Schweitzer Engineering Laboratories

Records67All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Schweitzer Engineering Laboratories records in CISA KEV

No Schweitzer Engineering Laboratories vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sel-3350 Firmware 20 records MEDIUM Sel-3532 Firmware 20 records MEDIUM Sel-3555 Firmware 20 records MEDIUM Sel-3560e Firmware 20 records MEDIUM Sel-3560s Firmware 20 records MEDIUM Sel-2241 Rtac Module Firmware 19 records MEDIUM Sel-3505-3 Firmware 19 records MEDIUM Sel-3505 Firmware 19 records MEDIUM

Records

19 records in Sel-2241 Rtac Module Firmware · all components

TI-2023-14859 CVE-2023-31149 · GHSA-m3jw-3mmv-49cj

Improper Input Validation in Web Interface

MEDIUM 43

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01086 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-20

TI-2023-14858 CVE-2023-31148 · GHSA-p988-gmr3-hxrg

Improper Input Validation in Web Interface

MEDIUM 43

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01086 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-20

TI-2023-14862 CVE-2023-31152 · GHSA-mx8v-phvm-3vvw

Authentication Bypass Using an Alternate Path or Channel

LOW 38

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00355 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-288

TI-2023-14860 CVE-2023-31150 · GHSA-c4vh-hhgm-3rm3

Storing Passwords in a Recoverable Format

LOW 37

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00473 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-257

TI-2023-02166 CVE-2023-2310 · GHSA-72xh-xv88-97qg

Channel Accessible by Non-Endpoint

LOW 33

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could resu…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.005 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-300

TI-2023-14875 CVE-2023-31165 · GHSA-8jmh-wwh6-r8gj

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14874 CVE-2023-31164 · GHSA-j243-387v-w5q4

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14873 CVE-2023-31163 · GHSA-g758-4v3v-524f

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14870 CVE-2023-31160 · GHSA-56f2-3rjw-3m8g

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14869 CVE-2023-31159 · GHSA-339w-8rqf-f9p6

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14868 CVE-2023-31158 · GHSA-67g2-pxhx-5qcm

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14867 CVE-2023-31157 · GHSA-qj89-36r9-crc5

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14866 CVE-2023-31156 · GHSA-m234-rvc3-28w2

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14865 CVE-2023-31155 · GHSA-jqgg-wqj8-56hq

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14864 CVE-2023-31154 · GHSA-936r-mr8m-5pqx

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14863 CVE-2023-31153 · GHSA-8v32-3rxm-6qfr

Improper Neutralization of Input During Web Page Generation

LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79

TI-2023-14872 CVE-2023-31162 · GHSA-5mhg-g4qw-g7v4

Improper Input Validation in Web Interface

LOW 23

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2023-05-10 Fixed in R150-V2, R149-V4 CWE-20

TI-2023-14876 CVE-2023-31166 · GHSA-5g6v-28xg-q6hr

Improper Limitation of a Pathname to a Restricted Directory

LOW 21

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote aut…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00588 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-22

TI-2023-14861 CVE-2023-31151 · GHSA-vhfp-m358-h5g3

Improper Certificate Validation

LOW 21

An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-m…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00246 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-295

Open these records in search →