Vulnerabilities (CVE)

Filtered by vendor Selinc Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-2267 1 Selinc 2 Sel-411l, Sel-411l Firmware 2023-12-06 N/A 5.4 MEDIUM
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.
CVE-2023-2266 1 Selinc 2 Sel-411l, Sel-411l Firmware 2023-12-06 N/A 6.1 MEDIUM
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.
CVE-2023-2265 1 Selinc 2 Sel-411l, Sel-411l Firmware 2023-12-06 N/A 6.1 MEDIUM
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details.
CVE-2023-31177 1 Selinc 2 Sel-451, Sel-451 Firmware 2023-12-06 N/A 6.1 MEDIUM
An Improper Neutralization of Input During Web Page Generation  ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for more details.
CVE-2023-34390 1 Selinc 2 Sel-451, Sel-451 Firmware 2023-12-06 N/A 6.5 MEDIUM
An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services. See product Instruction Manual Appendix A dated 20230830 for more details.
CVE-2023-34389 1 Selinc 2 Sel-451, Sel-451 Firmware 2023-12-06 N/A 6.5 MEDIUM
An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more details.