Storing Passwords in a Recoverable Format

CVE-2023-31150

Summary

A vulnerability has been identified in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system, which involves the insecure storage of passwords in a format that is recoverable by authenticated attackers. This flaw poses a significant security risk, as it can potentially allow unauthorized access to sensitive information and control over automated systems. The issue is documented in SEL Service Bulletin dated November 15, 2022. Organizations using SEL RTAC should review their password storage practices to mitigate this risk.

References