PatchTheCVECVE-2023-31170: An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Labor
CVE-2023-31170 is a medium-severity flaw (CVSS 5.9) affecting sel-5030 acselerator quickset. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.9 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 72%) |
| CISA exploited list | No |
| Weakness | CWE-829 |
| Published | 2023-08-31 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-31170?
sel-5030 acselerator quickset: upgrade to newer than 7.1.3.0. Exact commands for each OS are on this page.
Is CVE-2023-31170 being exploited?
CVE-2023-31170 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-31170 affect?
CVE-2023-31170 affects sel-5030 acselerator quickset. Severity is medium (CVSS 5.9). An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authoriz
How urgent is CVE-2023-31170?
Priority 28/100. No elevated risk signals yet.
Related CVEs
- CVE-2023-31172 MEDIUM 5.9 UPGRADE An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030
- CVE-2023-31171 MEDIUM 5.9 UPGRADE An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the
- CVE-2023-31169 MEDIUM 4.8 UPGRADE An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 ac
- CVE-2023-31168 MEDIUM 5.5 UPGRADE An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Labor