Execution with Unnecessary Privileges
CVE-2023-31175

8.8HIGH

Key Information:

Vendor

Schweitzer Engineering Laboratories

Status
Sel-5037 Sel Grid Configurator
Vendor
CVE Published:
31 August 2023

What is CVE-2023-31175?

A vulnerability in the SEL Grid Configurator affects the SEL-5037, where an attacker could exploit this flaw to execute system commands with elevated privileges, potentially compromising the integrity of the system. It's crucial for users of SEL-5037 to apply the latest updates and follow security best practices to protect against unauthorized access and ensure system safety.

Affected Version(s)

SEL-5037 SEL Grid Configurator Windows 0 < 4.5.0.20

References

https://selinc.com/support/security-notifications/externa...
https://www.nozominetworks.com/blog/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrea Palanca of Nozomi Networks
.