PT-2023-7419 · Schweitzer Engineering Laboratories · Sel-451

Andrea Palanca + 1 · Publicado 2023-11-30 · Atualizado 2023-12-06 · CVE-2023-34389

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL-451 (affected versions not specified)

Description The issue is related to an allocation of resources without limits or throttling, which could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. This could potentially be exploited to launch attacks against authorized and authenticated users. For more details, refer to the product Instruction Manual Appendix A dated 20230830.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

BDU:2023-08456

CVE-2023-34389

Produtos afetados

Sel-451

Referências · 7

• https://bdu.fstec.ru/vul/2023-08456 · Nota de Segurança
• https://selinc.com/support/security-notifications/external-reports · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34389 · Nota de Segurança
• https://t.me/cvenotify/61736 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1730296132239286285 · Publicação no Twitter
• https://nozominetworks.com/blog · Nota
• https://osv.dev/vulnerability/CVE-2023-34389 · Aviso do Fabricante