rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-31149 Improper Input Validation in Web Interface

An Improper Input Validation vulnerability 

in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.
See SEL Service Bulletin dated 2022-11-15 for more details.





Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:20:16.373Z
CVE-2023-31150 Storing Passwords in a Recoverable Format

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords.
See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-257
description: CWE-257 Storing Passwords in a Recoverable Format
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:21:07.126Z
CVE-2023-31151 Improper Certificate Validation
An Improper Certificate Validation vulnerability 

in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface

could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack.
See SEL Service Bulletin dated 2022-11-15 for more details.





Problem types: cwe_id: CWE-295
description: CWE-295 Improper Certificate Validation
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:21:30.649Z
CVE-2023-31152 Authentication Bypass Using an Alternate Path or Channel
An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. 
See SEL Service Bulletin dated 2022-11-15 for more details.




Problem types: cwe_id: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:21:50.029Z
CVE-2023-31153 Improper Neutralization of Input During Web Page Generation
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.




Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:22:06.307Z
CVE-2023-31154 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:22:18.749Z
CVE-2023-31155 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:22:32.651Z
CVE-2023-31156 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:22:44.225Z
CVE-2023-31157 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:22:58.877Z
CVE-2023-31158 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:23:15.171Z
CVE-2023-31159 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:23:29.182Z
CVE-2023-31160 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.





See SEL Service Bulletin dated 2022-11-15 for more details.



Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3505
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3505-3
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3530-4
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-2241 RTAC module
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:23:43.200Z
CVE-2023-31161 Improper Input Validation in Web Interface
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects.

See SEL Service Bulletin dated 2022-11-15 for more details.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Schweitzer Engineering Laboratories
product: SEL-3532
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3555
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560S
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3560E
default_status: unaffected
vendor: Schweitzer Engineering Laboratories
product: SEL-3350
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Andrea Palanca, Nozomi Networks
Published: 2023-05-10T19:24:03.543Z