Description (CNA)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for more details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schweitzer Engineering Laboratories / SEL-451 | affected R315-V0 before R315-V4; affected R316-V0 before R316-V4; affected R317-V0 before R317-V4; affected R318-V0 before R318-V5; affected R320-V0 before R320-V3; affected R321-V0 before R321-V3; affected R322-V0 before R322-V3; affected R323-V0 before R323-V5; affected R324-V0 before R324-V4; affected R325-V0 before R325-V3; affected R326-V0 before R326-V1; affected R327-V0 before R327-V1 |
CWE
CWE-79
References
- https://selinc.com/support/security-notifications/external-reports/
- https://www.nozominetworks.com/blog/
ADP enrichment
No English description supplied.