Improper Neutralization of Input During Web Page Generation
CVE-2023-31157
4.3MEDIUM
Key Information:
- Vendor
- CVE Published:
- 10 May 2023
What is CVE-2023-31157?
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.
See SEL Service Bulletin dated 2022-11-15 for more details.
Affected Version(s)
SEL-2241 RTAC module Linux R132-V0
SEL-2241 RTAC module Linux R132-V0
SEL-2241 RTAC module Linux R132-V0