Description (CNA)
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schweitzer Engineering Laboratories / SEL-3505 | affected R122-V0 before R150-V2; affected R122-V0 before R149-V4; affected R122-V0 before R148-V7; affected R122-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3505-3 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3530 | affected R122-V0 before R150-V2; affected R122-V0 before R149-V4; affected R122-V0 before R148-V7; affected R122-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3530-4 | affected R122-V0 before R150-V2; affected R122-V0 before R149-V4; affected R122-V0 before R148-V7; affected R122-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3532 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3555 | affected R134-V0 before R150-V2; affected R134-V0 before R149-V4; affected R134-V0 before R148-V7; affected R134-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560S | affected R144-V2 before R150-V2; affected R144-V2 before R149-V4; affected R144-V2 before R148-V7; affected R144-V2 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560E | affected R144-V2 before R150-V2; affected R144-V2 before R149-V4; affected R144-V2 before R148-V7; affected R144-V2 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-2241 RTAC module | affected R122-V0 before R150-V2; affected R122-V0 before R149-V4; affected R122-V0 before R148-V7; affected R122-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3350 | affected R148-V0 before R150-V2; affected R148-V0 before R149-V4; affected R148-V0 before R148-V7 |
CWE
CWE-257
References
- https://selinc.com/support/security-notifications/external-reports/
- https://www.nozominetworks.com/blog/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.