Selinc

47 CVEs across 36 Selinc products. Browse Selinc vulnerabilities, severities, and proof-of-concept exploits.

Selinc products with known CVEs

ProductCVEs
Sel-350521
Sel-353021
Sel-3530-421
Sel-335020
Sel-3350 Firmware20
Sel-353220
Sel-3532 Firmware20
Sel-355520
Sel-3555 Firmware20
Sel-3560e20
Sel-3560e Firmware20
Sel-3560s20
Sel-3560s Firmware20
Sel-2241 Rtac Module19
Sel-2241 Rtac Module Firmware19
Sel-3505-319
Sel-3505-3 Firmware19
Sel-3505 Firmware19
Sel-3530-4 Firmware19
Sel-3530 Firmware19
Sel-4515
Sel-451 Firmware5
Sel-5030 Acselerator Quickset5
Sel-411l4
Sel-411l Firmware4
Sel-5037 Sel Grid Configurator4
Acselerator Architect2
Sel-22412
Acselerator Quickset1
Sel-36201
Sel-3620 Firmware1
Sel-36221
Sel-3622 Firmware1
Sel-5033 Acselerator Real-Time Automation Controller1
Sel-5036 Acselerator Bay Screen Builder1
Sel Compass1
Selinc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-34390Medium4.52023-11-30An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service…
CVE-2023-34389Medium4.52023-11-30An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated att…
CVE-2023-34388Medium6.52023-11-30An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perfor…
CVE-2023-31177Medium4.32023-11-30An Improper Neutralization of Input During Web Page Generation  ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an atta…
CVE-2023-31176High7.52023-11-30An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session…
CVE-2023-2267Medium4.32023-11-30An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an aut…
CVE-2023-2266Medium4.32023-11-30An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-si…
CVE-2023-2265Medium4.32023-11-30An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform…
CVE-2023-2264Medium4.02023-11-30An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to…
CVE-2023-34392High8.22023-08-31 A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker…
CVE-2023-34391High7.42023-08-31Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulatin…
CVE-2023-31175High8.82023-08-31 An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to ru…
CVE-2023-31174High7.42023-08-31 A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed i…
CVE-2023-31173High7.72023-08-31Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. S…
CVE-2023-31172Medium5.92023-08-31 An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an att…
CVE-2023-31171Medium5.92023-08-31 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSE…
CVE-2023-31170Medium5.92023-08-31 An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software co…
CVE-2023-31169Medium4.82023-08-31 An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attack…
CVE-2023-31168Medium5.52023-08-31 An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software co…
CVE-2023-31167Medium5.02023-08-31Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Sc…
CVE-2023-31166Medium4.12023-05-10An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation…
CVE-2023-31165Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31164Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31163Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31162Medium4.82023-05-10An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a re…
CVE-2023-31161Medium5.92023-05-10An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an a…
CVE-2023-31160Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31159Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31158Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31157Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31156Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31155Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31154Medium4.32023-05-10 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut…
CVE-2023-31153Medium4.32023-05-10An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Auto…
CVE-2023-31152Medium4.02023-05-10An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC)…
CVE-2023-31151Medium4.72023-05-10An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could a…
CVE-2023-31150High8.02023-05-10 A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database syste…
CVE-2023-31149Critical9.12023-05-10 An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a…
CVE-2023-31148Critical9.12023-05-10An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a…
CVE-2023-2310Medium6.82023-05-10A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote a…
CVE-2018-10608High7.52018-07-24SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP server, which may c…
CVE-2018-10604High8.82018-07-24SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within th…
CVE-2018-10600Critical9.82018-07-24SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbit…
CVE-2017-7928Critical10.02017-08-07An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R2…
CVE-2013-27982013-08-09Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow physically proximate attackers to cause a denial of servic…
CVE-2013-27922013-08-09Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service (infinite lo…
CVE-2013-06652013-03-21Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users…