Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority LOW 30

An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00664 Published 2023-11-30 Fixed in R315-V4, R316-V4 +10 CWE-20
Priority LOW 30

An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00664 Published 2023-11-30 Fixed in R315-V4, R316-V4 +10 CWE-770
Priority MEDIUM 44

An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00913 Published 2023-11-30 Fixed in R315-V4, R316-V4 +10 CWE-287
Priority LOW 28

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a vi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00485 Published 2023-11-30 Fixed in R315-V4, R316-V4 +10 CWE-79
Priority MEDIUM 50

An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00927 Published 2023-11-30 Fixed in R315-V4, R316-V4 +10 CWE-331