Vulnerabilities

An authenticated user can modify application state data.

Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files

OpenFlow discovery protocol can exhaust resources because it is not rate limited

Failed login response could be different depending on whether the username was local or central.

Password guessing limits could be bypassed when using LDAP authentication.

An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set.

An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.

An authenticated user attempting to change their password could do so without using the current password.

An authenticated user without user-management permissions could identify other user accounts.

An administrator could discover another account's credentials.

An authenticated user without user-management permissions could view other users account information.

An authenticated administrator could modify the Created By username for a user account

Users who were required to change their password could still access system information before changing their password

A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.

An authenticated user without user administrative permissions could change the administrator Account Name.

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting

An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.

SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application.

Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700…

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user.

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenti…

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and autho…

An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior.

An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services.