Description (CNA)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schweitzer Engineering Laboratories / SEL-3505 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3505-3 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3530 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3530-4 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3532 | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3555 | affected R134-V0 before R150-V2; affected R134-V0 before R149-V4; affected R134-V0 before R148-V7; affected R134-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560S | affected R144-V2 before R150-V2; affected R144-V2 before R149-V4; affected R144-V2 before R148-V7; affected R144-V2 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560E | affected R144-V2 before R150-V2; affected R144-V2 before R149-V4; affected R144-V2 before R148-V7; affected R144-V2 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-2241 RTAC module | affected R132-V0 before R150-V2; affected R132-V0 before R149-V4; affected R132-V0 before R148-V7; affected R132-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3350 | affected R148-V0 before R150-V2; affected R148-V0 before R149-V4; affected R148-V0 before R148-V7 |
CWE
CWE-79
References
- https://selinc.com/support/security-notifications/external-reports/
- https://www.nozominetworks.com/blog/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.