CVE-2023-34392 (published 2023-08-31T15:31:57.140Z)

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator.





See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.


This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.


Affected products: Vendor: Schweitzer Engineering Laboratories
Product: SEL-5037 SEL Grid Configurator
Versions: 0