Read the docs
TI-2023-14872 Aliases CVE-2023-31162GHSA-5mhg-g4qw-g7v4

Improper Input Validation in Web Interface

Priority LOW 23CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00485 42nd percentileScored 2026-11-07
Fix Fixed SEL-3505 (Schweitzer Engineering Laboratories): R150-V2, R149-V4SEL-3505-3 (Schweitzer Engineering Laboratories): R150-V2, R149-V4+8 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Schweitzer Engineering LaboratoriesSEL-3505R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3505-3R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3530R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3530-4R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3532R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3555R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3560SR149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3560ER149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-2241 RTAC moduleR149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA
Schweitzer Engineering LaboratoriesSEL-3350R149-V0 to before R150-V2; R149-V0 to before R149-V4R150-V2, R149-V4Patch availableCNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:selinc:sel-2241_rtac_module_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-2241_rtac_module:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3350_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3350:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3505_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3505:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3505-3_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3505-3:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3530_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3530:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:selinc:sel-3530-4_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3530-4:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3532_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3532:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3555_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3555:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3560e_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3560e:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories
cpe:2.3:o:selinc:sel-3560s_firmware:*:*:*:*:*:*:*:*r149-v0 to before r150-v2VulnerableSchweitzer Engineering Laboratories
cpe:2.3:h:selinc:sel-3560s:-:*:*:*:*:*:*:*not specified by NVDRunning onSchweitzer Engineering Laboratories

Remediation

  • Fix · CNA SEL-3505 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3505-3 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3530 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3530-4 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3532 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3555 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3560S (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3560E (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-2241 RTAC module (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4
  • Fix · CNA SEL-3350 (Schweitzer Engineering Laboratories) Fixed in R150-V2, R149-V4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-31162
  2. 2026-10-03 Alias added: GHSA-5mhg-g4qw-g7v4

References

Advisory 2

  • TI-2023-14859 Improper Input Validation in Web Interface CVSS 3.1CRITICAL 9.1
  • TI-2023-14858 Improper Input Validation in Web Interface CVSS 3.1CRITICAL 9.1
  • TI-2023-14862 Authentication Bypass Using an Alternate Path or Channel CVSS 3.1HIGH 8.8
  • TI-2023-14860 Storing Passwords in a Recoverable Format CVSS 3.1HIGH 8.0
  • TI-2023-02166 Channel Accessible by Non-Endpoint CVSS 3.1MEDIUM 6.8
  • TI-2023-14875 Improper Neutralization of Input During Web Page Generation CVSS 3.1MEDIUM 5.4
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences