Description (CNA)
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schweitzer Engineering Laboratories / SEL-3505 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3505-3 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3530 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3530-4 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3532 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3555 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3560S | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3560E | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-2241 RTAC module | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
| Schweitzer Engineering Laboratories / SEL-3350 | affected R149-V0 before R150-V2; affected R149-V0 before R149-V4 |
CWE
CWE-20
References
- https://selinc.com/support/security-notifications/external-reports/
- https://www.nozominetworks.com/blog/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.