sel-2241 rtac module firmware vulnerabilities and fixes

Recent CVEs affecting sel-2241 rtac module firmware, with upgrade or downgrade steps. 19 tracked.

Also searched as: sel 2241 rtac module firmware, sel-2241rtacmodulefirmware.

sel-2241 rtac module firmware has 19 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 19. Most recent: 2023-05-10. Highest priority: CVE-2023-31149 (score 48/100).

CVE-2023-31166 MEDIUM 4.1 UPGRADE UPGRADE An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweit
CVE-2023-31165 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31164 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31163 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31162 MEDIUM 4.8 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Con
CVE-2023-31160 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31159 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31158 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31157 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31156 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31155 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31154 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31153 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the S
CVE-2023-31152 MEDIUM 4.0 UPGRADE UPGRADE An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Labora
CVE-2023-31151 MEDIUM 4.7 UPGRADE UPGRADE An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automa
CVE-2023-31150 HIGH 8.0 UPGRADE UPGRADE A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Tim
CVE-2023-31149 CRITICAL 9.1 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation
CVE-2023-31148 CRITICAL 9.1 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation C
CVE-2023-2310 MEDIUM 6.8 UPGRADE UPGRADE A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Au

FAQ

How do I fix sel-2241 rtac module firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sel-2241 rtac module firmware being exploited right now?

None of the tracked sel-2241 rtac module firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sel-2241 rtac module firmware CVE should I patch first?

CVE-2023-31149 currently ranks highest (48/100): An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation .

RSS feed for sel-2241 rtac module firmware · ← Back to latest CVEs