Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 4.5.0.20 Clear all filters
TI-2023-17222 CVE-2023-34392 · GHSA-fqhh-mfcp-4mcw

Missing Authentication for Critical Function

Priority MEDIUM 40

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00453 Published 2023-08-31 Fixed in 4.5.0.20 CWE-306
TI-2023-14885 CVE-2023-31175 · GHSA-84qj-w5f9-c492

Execution with Unnecessary Privileges

Priority MEDIUM 43

An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the syst…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00432 Published 2023-08-31 Fixed in 4.5.0.20 CWE-250
TI-2023-14884 CVE-2023-31174 · GHSA-g3hq-7qpp-8rv2

Cross-site request forgery (CSRF) in Schweitzer Engineering Laboratories SEL-5037 SEL…

Priority LOW 32

A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device ope…

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00237 Published 2023-08-31 Fixed in 4.5.0.20 CWE-352