CVE-2023-31171: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the

Q: How do I fix CVE-2023-31171?

sel-5030 acselerator quickset: upgrade to newer than 7.1.3.0. Exact commands for each OS are on this page.

Q: Is CVE-2023-31171 being exploited?

CVE-2023-31171 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2023-31171 affect?

CVE-2023-31171 affects sel-5030 acselerator quickset. Severity is medium (CVSS 5.9). An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that coul

Q: How urgent is CVE-2023-31171?

Priority 28/100. No elevated risk signals yet.

Routine

MEDIUM 5.9UPGRADE

CVE-2023-31171 is a medium-severity flaw (CVSS 5.9) affecting sel-5030 acselerator quickset. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	5.9 (Medium)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	Required
EPSS exploit chance	0.3% (top 72%)
CISA exploited list	No
Weakness	CWE-89
Published	2023-08-31
Last modified	2026-06-17

Publisher (CNA): Schweitzer Engineering Laboratories, Inc. · Vendor: selinc

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-08-31 16:15 UTCPublished CVE record published
2026-06-17 05:56 UTCUpdated Record last modified

selinc sel-5030 acselerator quickset UPGRADE

Affected: <= 7.1.3.0

Fixed in: newer than 7.1.3.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy sel-5030-acselerator-quickset || rpm -q sel-5030-acselerator-quickset || sel-5030-acselerator-quickset --version

2. UPGRADE to newer than 7.1.3.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade sel-5030-acselerator-quickset

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade sel-5030-acselerator-quickset

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-31171?

sel-5030 acselerator quickset: upgrade to newer than 7.1.3.0. Exact commands for each OS are on this page.

Is CVE-2023-31171 being exploited?

CVE-2023-31171 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-31171 affect?

CVE-2023-31171 affects sel-5030 acselerator quickset. Severity is medium (CVSS 5.9). An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that coul

How urgent is CVE-2023-31171?

Priority 28/100. No elevated risk signals yet.

Related CVEs

CVE-2023-31172 MEDIUM 5.9 UPGRADE An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030
CVE-2023-31170 MEDIUM 5.9 UPGRADE An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Labor
CVE-2023-31169 MEDIUM 4.8 UPGRADE An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 ac
CVE-2023-31168 MEDIUM 5.5 UPGRADE An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Labor

References

← Back to latest CVEs