<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sel-451 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-34390: An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote auth</title><link>https://patchthecve.com/cve/CVE-2023-34390.html</link><guid>https://patchthecve.com/cve/CVE-2023-34390.html</guid><pubDate>Wed, 17 Jun 2026 06:03:32 +0000</pubDate><description>MEDIUM 4.5: An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services.



See product Instruction Manual Appendix A dated 20230830 for more details.


</description></item><item><title>CVE-2023-34389: An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratori</title><link>https://patchthecve.com/cve/CVE-2023-34389.html</link><guid>https://patchthecve.com/cve/CVE-2023-34389.html</guid><pubDate>Wed, 17 Jun 2026 06:03:32 +0000</pubDate><description>MEDIUM 4.5: An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time.



See product Instruction Manual Appendix A dated 20230830 for more d</description></item><item><title>CVE-2023-34388: An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remo</title><link>https://patchthecve.com/cve/CVE-2023-34388.html</link><guid>https://patchthecve.com/cve/CVE-2023-34388.html</guid><pubDate>Wed, 17 Jun 2026 06:03:32 +0000</pubDate><description>MEDIUM 6.5: An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication.



See product Instruction Manual Appendix A dated 20230830 for more details.


</description></item><item><title>CVE-2023-31177: An Improper Neutralization of Input During Web Page Generation  (&#x27;Cross-site Scripting&#x27;) in the Schweitzer Eng</title><link>https://patchthecve.com/cve/CVE-2023-31177.html</link><guid>https://patchthecve.com/cve/CVE-2023-31177.html</guid><pubDate>Wed, 17 Jun 2026 05:56:28 +0000</pubDate><description>MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation  (&#x27;Cross-site Scripting&#x27;) in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim&#x27;s system.



See product Instruction Manual Appendix A dated 20230830 for </description></item><item><title>CVE-2023-31176: An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauth</title><link>https://patchthecve.com/cve/CVE-2023-31176.html</link><guid>https://patchthecve.com/cve/CVE-2023-31176.html</guid><pubDate>Wed, 17 Jun 2026 05:56:28 +0000</pubDate><description>HIGH 7.5: An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. 


See product Instruction Manual Appendix A dated 20230830 for more details.



</description></item></channel></rss>