Authentication Bypass Using an Alternate Path or Channel

CVE-2023-31152

Summary

An Authentication Bypass vulnerability exists in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface. This flaw allows unauthorized users to bypass authentication mechanisms, presenting a significant security risk. System administrators should refer to the SEL Service Bulletin published on November 15, 2022, for detailed information on this vulnerability and recommended mitigation strategies. Ensuring robust security configurations and timely updates is crucial to protect against potential exploitation.

References