Improper input validation could lead to reflection injection attacks
CVE-2023-2267

5.4MEDIUM

Key Information:

Vendor: Schweitzer Engineering Laboratories
Status: SEL-411L
Vendor: CVE Published:; 30 November 2023

🔔 Create Schweitzer Engineering Laboratories Vulnerability Alert

What is CVE-2023-2267?

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user.

See product Instruction Manual Appendix A dated 20230830 for more details.

Affected Version(s)

SEL-411L R118-V0

SEL-411L R119-V0

SEL-411L R120-V0

References

https://selinc.com/support/security-notifications/externa...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 30, 2023
Vulnerability Reserved
Apr 24, 2023

Credit

Sushant Mane, Parul Sindhwad, Imran Jamadar & Dr. Faruk Kazi from CoE-CNDS Lab, VJTI, Mumbai, India.