Description (CNA)
An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack. See SEL Service Bulletin dated 2022-11-15 for more details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schweitzer Engineering Laboratories / SEL-3505 | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3505-3 | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3530 | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3530-4 | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3532 | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3555 | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560S | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560E | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-2241 RTAC module | affected R147-V0 before R150-V2; affected R147-V0 before R149-V4; affected R147-V0 before R148-V7; affected R147-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3350 | affected R148-V0 before R150-V2; affected R148-V0 before R149-V4; affected R148-V0 before R148-V7 |
CWE
CWE-295
References
- https://selinc.com/support/security-notifications/external-reports/
- https://www.nozominetworks.com/blog/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.