Description (CNA)
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 for more details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schweitzer Engineering Laboratories / SEL-3532 | affected R143-V0 before R150-V2; affected R143-V0 before R149-V4; affected R143-V0 before R148-V7; affected R143-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3555 | affected R143-V0 before R150-V2; affected R143-V0 before R149-V4; affected R143-V0 before R148-V7; affected R143-V0 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560S | affected R144-V2 before R150-V2; affected R144-V2 before R149-V4; affected R144-V2 before R148-V7; affected R144-V2 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3560E | affected R144-V2 before R150-V2; affected R144-V2 before R149-V4; affected R144-V2 before R148-V7; affected R144-V2 before R147-V6 |
| Schweitzer Engineering Laboratories / SEL-3350 | affected R148-V0 before R150-V2; affected R148-V0 before R149-V4; affected R148-V0 before R148-V7 |
CWE
CWE-20
References
- https://selinc.com/support/security-notifications/external-reports/
- https://www.nozominetworks.com/blog/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.