What is CVE-2023-31167?

CVE-2023-31167 is a medium-severity vulnerability in Microsoft Windows, classified under Path Traversal. CVSS score: 5.0/10. Published 2023-08-31.

How severe is CVE-2023-31167?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Path Traversal in Microsoft Windows

CVE-2023-31167

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details. This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.004 (30.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N.

Affected products

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security@selinc.com (Vendor Advisory)
security@selinc.com (Not Applicable)

Frequently asked questions

What is CVE-2023-31167?: CVE-2023-31167 is a medium-severity vulnerability in Microsoft Windows, classified under Path Traversal. CVSS score: 5.0/10. Published 2023-08-31.
How severe is CVE-2023-31167?: Medium severity. CVSS v3 base score is 5.0 out of 10.