https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-31166.htmlhttps://patchthecve.com/cve/CVE-2023-31166.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.1: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. Sehttps://patchthecve.com/cve/CVE-2023-31165.htmlhttps://patchthecve.com/cve/CVE-2023-31165.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEhttps://patchthecve.com/cve/CVE-2023-31164.htmlhttps://patchthecve.com/cve/CVE-2023-31164.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEhttps://patchthecve.com/cve/CVE-2023-31163.htmlhttps://patchthecve.com/cve/CVE-2023-31163.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEhttps://patchthecve.com/cve/CVE-2023-31162.htmlhttps://patchthecve.com/cve/CVE-2023-31162.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.8: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more dethttps://patchthecve.com/cve/CVE-2023-31160.htmlhttps://patchthecve.com/cve/CVE-2023-31160.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31159.htmlhttps://patchthecve.com/cve/CVE-2023-31159.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31158.htmlhttps://patchthecve.com/cve/CVE-2023-31158.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31157.htmlhttps://patchthecve.com/cve/CVE-2023-31157.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31156.htmlhttps://patchthecve.com/cve/CVE-2023-31156.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31155.htmlhttps://patchthecve.com/cve/CVE-2023-31155.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31154.htmlhttps://patchthecve.com/cve/CVE-2023-31154.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31153.htmlhttps://patchthecve.com/cve/CVE-2023-31153.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Sehttps://patchthecve.com/cve/CVE-2023-31152.htmlhttps://patchthecve.com/cve/CVE-2023-31152.htmlWed, 17 Jun 2026 05:56:23 +0000MEDIUM 4.0: An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-31151.htmlhttps://patchthecve.com/cve/CVE-2023-31151.htmlWed, 17 Jun 2026 05:56:23 +0000MEDIUM 4.7: An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack. See SEL Service Bulletin dated 2022-11-15 for more detaihttps://patchthecve.com/cve/CVE-2023-31150.htmlhttps://patchthecve.com/cve/CVE-2023-31150.htmlWed, 17 Jun 2026 05:56:23 +0000HIGH 8.0: A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-31149.htmlhttps://patchthecve.com/cve/CVE-2023-31149.htmlWed, 17 Jun 2026 05:56:23 +0000CRITICAL 9.1: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-31148.htmlhttps://patchthecve.com/cve/CVE-2023-31148.htmlWed, 17 Jun 2026 05:56:23 +0000CRITICAL 9.1: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-2310.htmlhttps://patchthecve.com/cve/CVE-2023-2310.htmlWed, 17 Jun 2026 05:52:15 +0000MEDIUM 6.8: A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service. See the ACSELERATOR RTAC SEL-5033 Software instruction