Channel Accessible by Non-Endpoint
CVE-2023-2310

6.8MEDIUM

Key Information:

Vendor
Schweitzer Engineering Laboratories
Status
Sel-3505
Sel-3505-3
Sel-3530
Sel-3530-4
Vendor
CVE Published:
10 May 2023

Summary

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.

See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.

Affected Version(s)

SEL-2241 RTAC module Linux R113-V0

SEL-2241 RTAC module Linux R113-V0

SEL-2241 RTAC module Linux R113-V0

References

https://selinc.com/support/security-notifications/externa...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adeen Ayub, Syed Ali Qasim, Irfan Ahmed, Virginia Commonwealth University
.