selinc vulnerabilities

Recent CVEs affecting selinc products. 40 tracked.

selinc has 40 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 40. Most recent: 2023-11-30. Highest priority: CVE-2023-31149 (score 48/100).

CVE-2023-34392 HIGH 8.2 UPGRADE A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5
CVE-2023-34391 HIGH 7.4 UPGRADE Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC
CVE-2023-34390 MEDIUM 4.5 UPGRADE An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote auth
CVE-2023-34389 MEDIUM 4.5 UPGRADE An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratori
CVE-2023-34388 MEDIUM 6.5 UPGRADE An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remo
CVE-2023-31177 MEDIUM 4.3 UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Eng
CVE-2023-31176 HIGH 7.5 UPGRADE An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauth
CVE-2023-31175 HIGH 8.8 UPGRADE An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SE
CVE-2023-31174 HIGH 7.4 UPGRADE A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Gri
CVE-2023-31173 HIGH 7.7 UPGRADE Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configura
CVE-2023-31172 MEDIUM 5.9 UPGRADE An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030
CVE-2023-31171 MEDIUM 5.9 UPGRADE An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the
CVE-2023-31170 MEDIUM 5.9 UPGRADE An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Labor
CVE-2023-31169 MEDIUM 4.8 UPGRADE An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 ac
CVE-2023-31168 MEDIUM 5.5 UPGRADE An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Labor
CVE-2023-31167 MEDIUM 5.0 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Eng
CVE-2023-31166 MEDIUM 4.1 UPGRADE UPGRADE An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweit
CVE-2023-31165 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31164 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31163 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31162 MEDIUM 4.8 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Con
CVE-2023-31161 MEDIUM 5.9 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Con
CVE-2023-31160 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31159 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31158 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31157 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31156 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31155 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31154 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the
CVE-2023-31153 MEDIUM 4.3 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the S
CVE-2023-31152 MEDIUM 4.0 UPGRADE UPGRADE An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Labora
CVE-2023-31151 MEDIUM 4.7 UPGRADE UPGRADE An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automa
CVE-2023-31150 HIGH 8.0 UPGRADE UPGRADE A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Tim
CVE-2023-31149 CRITICAL 9.1 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation
CVE-2023-31148 CRITICAL 9.1 UPGRADE UPGRADE An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation C
CVE-2023-2310 MEDIUM 6.8 UPGRADE UPGRADE A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Au
CVE-2023-2267 MEDIUM 4.3 UPGRADE An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an atta
CVE-2023-2266 MEDIUM 4.3 UPGRADE An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-
CVE-2023-2265 MEDIUM 4.3 UPGRADE An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L co
CVE-2023-2264 MEDIUM 4.0 UPGRADE An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a m

FAQ

How do I fix selinc vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is selinc being exploited right now?

None of the tracked selinc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which selinc CVE should I patch first?

CVE-2023-31149 currently ranks highest (48/100): An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation .

Products

RSS feed for selinc · ← Back to latest CVEs