https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-34390.htmlhttps://patchthecve.com/cve/CVE-2023-34390.htmlWed, 17 Jun 2026 06:03:32 +0000MEDIUM 4.5: An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services. See product Instruction Manual Appendix A dated 20230830 for more details. https://patchthecve.com/cve/CVE-2023-34389.htmlhttps://patchthecve.com/cve/CVE-2023-34389.htmlWed, 17 Jun 2026 06:03:32 +0000MEDIUM 4.5: An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more dhttps://patchthecve.com/cve/CVE-2023-34388.htmlhttps://patchthecve.com/cve/CVE-2023-34388.htmlWed, 17 Jun 2026 06:03:32 +0000MEDIUM 6.5: An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details. https://patchthecve.com/cve/CVE-2023-31177.htmlhttps://patchthecve.com/cve/CVE-2023-31177.htmlWed, 17 Jun 2026 05:56:28 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation  ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for https://patchthecve.com/cve/CVE-2023-31176.htmlhttps://patchthecve.com/cve/CVE-2023-31176.htmlWed, 17 Jun 2026 05:56:28 +0000HIGH 7.5: An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication.  See product Instruction Manual Appendix A dated 20230830 for more details. https://patchthecve.com/cve/CVE-2023-2267.htmlhttps://patchthecve.com/cve/CVE-2023-2267.htmlWed, 17 Jun 2026 05:52:08 +0000MEDIUM 4.3: An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details. https://patchthecve.com/cve/CVE-2023-2266.htmlhttps://patchthecve.com/cve/CVE-2023-2266.htmlWed, 17 Jun 2026 05:52:08 +0000MEDIUM 4.3: An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for morehttps://patchthecve.com/cve/CVE-2023-2265.htmlhttps://patchthecve.com/cve/CVE-2023-2265.htmlWed, 17 Jun 2026 05:52:08 +0000MEDIUM 4.3: An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for morehttps://patchthecve.com/cve/CVE-2023-2264.htmlhttps://patchthecve.com/cve/CVE-2023-2264.htmlWed, 17 Jun 2026 05:52:08 +0000MEDIUM 4.0: An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details. https://patchthecve.com/cve/CVE-2023-34392.htmlhttps://patchthecve.com/cve/CVE-2023-34392.htmlWed, 17 Jun 2026 06:03:32 +0000HIGH 8.2: A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 2https://patchthecve.com/cve/CVE-2023-34391.htmlhttps://patchthecve.com/cve/CVE-2023-34391.htmlWed, 17 Jun 2026 06:03:32 +0000HIGH 7.4: Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details. This issue affechttps://patchthecve.com/cve/CVE-2023-31175.htmlhttps://patchthecve.com/cve/CVE-2023-31175.htmlWed, 17 Jun 2026 05:56:28 +0000HIGH 8.8: An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A and Appendix E dated 20230615 for mohttps://patchthecve.com/cve/CVE-2023-31174.htmlhttps://patchthecve.com/cve/CVE-2023-31174.htmlWed, 17 Jun 2026 05:56:28 +0000HIGH 7.4: A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 forhttps://patchthecve.com/cve/CVE-2023-31173.htmlhttps://patchthecve.com/cve/CVE-2023-31173.htmlWed, 17 Jun 2026 05:56:27 +0000HIGH 7.7: Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before https://patchthecve.com/cve/CVE-2023-31172.htmlhttps://patchthecve.com/cve/CVE-2023-31172.htmlWed, 17 Jun 2026 05:56:27 +0000MEDIUM 5.9: An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dahttps://patchthecve.com/cve/CVE-2023-31171.htmlhttps://patchthecve.com/cve/CVE-2023-31171.htmlWed, 17 Jun 2026 05:56:27 +0000MEDIUM 5.9: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Inshttps://patchthecve.com/cve/CVE-2023-31170.htmlhttps://patchthecve.com/cve/CVE-2023-31170.htmlWed, 17 Jun 2026 05:56:27 +0000MEDIUM 5.9: An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A andhttps://patchthecve.com/cve/CVE-2023-31169.htmlhttps://patchthecve.com/cve/CVE-2023-31169.htmlWed, 17 Jun 2026 05:56:27 +0000MEDIUM 4.8: An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E datedhttps://patchthecve.com/cve/CVE-2023-31168.htmlhttps://patchthecve.com/cve/CVE-2023-31168.htmlWed, 17 Jun 2026 05:56:27 +0000MEDIUM 5.5: An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A andhttps://patchthecve.com/cve/CVE-2023-31167.htmlhttps://patchthecve.com/cve/CVE-2023-31167.htmlWed, 17 Jun 2026 05:56:27 +0000MEDIUM 5.0: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEhttps://patchthecve.com/cve/CVE-2023-31166.htmlhttps://patchthecve.com/cve/CVE-2023-31166.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.1: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. Sehttps://patchthecve.com/cve/CVE-2023-31165.htmlhttps://patchthecve.com/cve/CVE-2023-31165.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEhttps://patchthecve.com/cve/CVE-2023-31164.htmlhttps://patchthecve.com/cve/CVE-2023-31164.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEhttps://patchthecve.com/cve/CVE-2023-31163.htmlhttps://patchthecve.com/cve/CVE-2023-31163.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEhttps://patchthecve.com/cve/CVE-2023-31162.htmlhttps://patchthecve.com/cve/CVE-2023-31162.htmlWed, 17 Jun 2026 05:56:26 +0000MEDIUM 4.8: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more dethttps://patchthecve.com/cve/CVE-2023-31161.htmlhttps://patchthecve.com/cve/CVE-2023-31161.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 5.9: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 fhttps://patchthecve.com/cve/CVE-2023-31160.htmlhttps://patchthecve.com/cve/CVE-2023-31160.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31159.htmlhttps://patchthecve.com/cve/CVE-2023-31159.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31158.htmlhttps://patchthecve.com/cve/CVE-2023-31158.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31157.htmlhttps://patchthecve.com/cve/CVE-2023-31157.htmlWed, 17 Jun 2026 05:56:25 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31156.htmlhttps://patchthecve.com/cve/CVE-2023-31156.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31155.htmlhttps://patchthecve.com/cve/CVE-2023-31155.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31154.htmlhttps://patchthecve.com/cve/CVE-2023-31154.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. Seehttps://patchthecve.com/cve/CVE-2023-31153.htmlhttps://patchthecve.com/cve/CVE-2023-31153.htmlWed, 17 Jun 2026 05:56:24 +0000MEDIUM 4.3: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Sehttps://patchthecve.com/cve/CVE-2023-31152.htmlhttps://patchthecve.com/cve/CVE-2023-31152.htmlWed, 17 Jun 2026 05:56:23 +0000MEDIUM 4.0: An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-31151.htmlhttps://patchthecve.com/cve/CVE-2023-31151.htmlWed, 17 Jun 2026 05:56:23 +0000MEDIUM 4.7: An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack. See SEL Service Bulletin dated 2022-11-15 for more detaihttps://patchthecve.com/cve/CVE-2023-31150.htmlhttps://patchthecve.com/cve/CVE-2023-31150.htmlWed, 17 Jun 2026 05:56:23 +0000HIGH 8.0: A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-31149.htmlhttps://patchthecve.com/cve/CVE-2023-31149.htmlWed, 17 Jun 2026 05:56:23 +0000CRITICAL 9.1: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-31148.htmlhttps://patchthecve.com/cve/CVE-2023-31148.htmlWed, 17 Jun 2026 05:56:23 +0000CRITICAL 9.1: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details. https://patchthecve.com/cve/CVE-2023-2310.htmlhttps://patchthecve.com/cve/CVE-2023-2310.htmlWed, 17 Jun 2026 05:52:15 +0000MEDIUM 6.8: A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service. See the ACSELERATOR RTAC SEL-5033 Software instruction