Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

20 records

Vendor: Schweitzer Engineering Laboratories Component: Sel-3560s Firmware Clear all filters
TI-2023-14876 CVE-2023-31166 · GHSA-5g6v-28xg-q6hr

Improper Limitation of a Pathname to a Restricted Directory

Priority LOW 21

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote aut…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00588 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-22
TI-2023-14875 CVE-2023-31165 · GHSA-8jmh-wwh6-r8gj

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14874 CVE-2023-31164 · GHSA-j243-387v-w5q4

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14873 CVE-2023-31163 · GHSA-g758-4v3v-524f

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14872 CVE-2023-31162 · GHSA-5mhg-g4qw-g7v4

Improper Input Validation in Web Interface

Priority LOW 23

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2023-05-10 Fixed in R150-V2, R149-V4 CWE-20
TI-2023-14871 CVE-2023-31161 · GHSA-r3qm-hp4j-w68f

Improper Input Validation in Web Interface

Priority LOW 39

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allow…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00543 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-20
TI-2023-14870 CVE-2023-31160 · GHSA-56f2-3rjw-3m8g

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14869 CVE-2023-31159 · GHSA-339w-8rqf-f9p6

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14868 CVE-2023-31158 · GHSA-67g2-pxhx-5qcm

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14867 CVE-2023-31157 · GHSA-qj89-36r9-crc5

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14866 CVE-2023-31156 · GHSA-m234-rvc3-28w2

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14865 CVE-2023-31155 · GHSA-jqgg-wqj8-56hq

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14864 CVE-2023-31154 · GHSA-936r-mr8m-5pqx

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14863 CVE-2023-31153 · GHSA-8v32-3rxm-6qfr

Improper Neutralization of Input During Web Page Generation

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-79
TI-2023-14862 CVE-2023-31152 · GHSA-mx8v-phvm-3vvw

Authentication Bypass Using an Alternate Path or Channel

Priority LOW 38

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00355 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-288
TI-2023-14861 CVE-2023-31151 · GHSA-vhfp-m358-h5g3

Improper Certificate Validation

Priority LOW 21

An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-m…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00246 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-295
TI-2023-14860 CVE-2023-31150 · GHSA-c4vh-hhgm-3rm3

Storing Passwords in a Recoverable Format

Priority LOW 37

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00473 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-257
TI-2023-14859 CVE-2023-31149 · GHSA-m3jw-3mmv-49cj

Improper Input Validation in Web Interface

Priority MEDIUM 43

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01086 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-20
TI-2023-14858 CVE-2023-31148 · GHSA-p988-gmr3-hxrg

Improper Input Validation in Web Interface

Priority MEDIUM 43

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01086 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-20
TI-2023-02166 CVE-2023-2310 · GHSA-72xh-xv88-97qg

Channel Accessible by Non-Endpoint

Priority LOW 33

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could resu…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.005 Published 2023-05-10 Fixed in R150-V2, R149-V4 +2 CWE-300