Improper Limitation of a Pathname to a Restricted Directory
CVE-2023-31166
4.1MEDIUM
Key Information:
- Vendor
- CVE Published:
- 10 May 2023
What is CVE-2023-31166?
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system.
See SEL Service Bulletin dated 2022-11-15 for more details.
Affected Version(s)
SEL-2241 RTAC module Linux R126-V0
SEL-2241 RTAC module Linux R126-V0
SEL-2241 RTAC module Linux R126-V0