sel-3505-3 firmware vulnerabilities and fixes

Recent CVEs affecting sel-3505-3 firmware, with upgrade or downgrade steps. 19 tracked.

Also searched as: sel 3505 3 firmware, sel-3505-3firmware.

sel-3505-3 firmware has 19 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 19. Most recent: 2023-05-10. Highest priority: CVE-2023-31149 (score 48/100).

• CVE-2023-31166 MEDIUM 4.1 UPGRADE UPGRADE An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweit
• CVE-2023-31165 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31164 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31163 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31162 MEDIUM 4.8 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Con
• CVE-2023-31160 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31159 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31158 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31157 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31156 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31155 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31154 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
• CVE-2023-31153 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the S
• CVE-2023-31152 MEDIUM 4.0 UPGRADE UPGRADE An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Labora
• CVE-2023-31151 MEDIUM 4.7 UPGRADE UPGRADE An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automa
• CVE-2023-31150 HIGH 8.0 UPGRADE UPGRADE A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Tim
• CVE-2023-31149 CRITICAL 9.1 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation
• CVE-2023-31148 CRITICAL 9.1 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation C
• CVE-2023-2310 MEDIUM 6.8 UPGRADE UPGRADE A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Au

FAQ

How do I fix sel-3505-3 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sel-3505-3 firmware being exploited right now?

None of the tracked sel-3505-3 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sel-3505-3 firmware CVE should I patch first?

CVE-2023-31149 currently ranks highest (48/100): An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation .

RSS feed for sel-3505-3 firmware · ← Back to latest CVEs