Improper restriction of rendered UI layers or frames could lead to clickjacking attack
CVE-2023-2265

6.1MEDIUM

Key Information:

Vendor

Schweitzer Engineering Laboratories

Status
SEL-411L
Vendor
CVE Published:
30 November 2023

What is CVE-2023-2265?

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user.

See product Instruction Manual Appendix A dated 20230830 for more details.

Affected Version(s)

SEL-411L R118-V0

SEL-411L R119-V0

SEL-411L R120-V0

References

https://selinc.com/support/security-notifications/externa...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sushant Mane, Parul Sindhwad, Imran Jamadar & Dr. Faruk Kazi from CoE-CNDS Lab, VJTI, Mumbai, India.
.