PT-2023-23182 · Schweitzer Engineering Laboratories · Sel Rtac

Andrea Palanca · Publicado 2023-05-10 · Atualizado 2023-05-17 · CVE-2023-31149

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) (affected versions not specified)

Description An Improper Input Validation issue in the SEL RTAC Web Interface could allow a remote authenticated attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the possibility of executing arbitrary code through improper input validation in the web interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2023-31149

Produtos afetados

Sel Rtac

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-31149 · Aviso do Fabricante
• https://t.me/cvenotify/50191 · Publicação no Telegram
• https://t.me/cibsecurity/63840 · Publicação no Telegram
• https://nozominetworks.com/blog · Nota
• https://selinc.com/support/security-notifications/external-reports · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-31149 · Nota de Segurança