CVE-2023-31167 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details. This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.

Affected (CNA)

Vendor / product	Versions
Schweitzer Engineering Laboratories / SEL-5036 acSELerator Bay Screen Builder Software	affected 0 before 1.0.49152.778

CWE

CWE-22

References

https://selinc.com/support/security-notifications/external-reports/
https://dragos.com

ADP enrichment

CVE

No English description supplied.

https://selinc.com/support/security-notifications/external-reports/
https://dragos.com

CISA-ADP

No English description supplied.

No references supplied.