CVE-2023-34388
Assigner: SEL
Published: 2023-11-30T16:54:08.503Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: SEL-451
vendor: Schweitzer Engineering Laboratories
versions: lessThan: R315-V4
status: affected
version: R315-V0
versionType: custom
lessThan: R316-V4
status: affected
version: R316-V0
versionType: custom
lessThan: R317-V4
status: affected
version: R317-V0
versionType: custom
lessThan: R318-V5
status: affected
version: R318-V0
versionType: custom
lessThan: R320-V3
status: affected
version: R320-V0
versionType: custom
lessThan: R321-V3
status: affected
version: R321-V0
versionType: custom
lessThan: R322-V3
status: affected
version: R322-V0
versionType: custom
lessThan: R323-V5
status: affected
version: R323-V0
versionType: custom
lessThan: R324-V4
status: affected
version: R324-V0
versionType: custom
lessThan: R325-V3
status: affected
version: R325-V0
versionType: custom
lessThan: R326-V1
status: affected
version: R326-V0
versionType: custom
lessThan: R327-V1
status: affected
version: R327-V0
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Andrea Palanca and Gabriele Quagliarella of Nozomi Networks
datePublic: 2023-11-30T09:56:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: An&nbsp;Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication.<br><br>

See product Instruction Manual Appendix A dated 20230830 for more details.

<br>
value: An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication.



See product Instruction Manual Appendix A dated 20230830 for more details.



impacts: capecId: CAPEC-115
descriptions: value: CAPEC-115 Authentication Bypass
capecId: CAPEC-593
descriptions: value: CAPEC-593 Session Hijacking
metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-287
description: CWE-287 Improper Authentication
type: CWE
source: discovery: UNKNOWN
title: Improper authentication could lead to session hijacking
x_generator: engine: Vulnogram 0.1.0-dev