User Enumeration Vulnerability in SEL Software by SEL
CVE-2025-46747

5.7MEDIUM

Key Information:

Vendor

Schweitzer Engineering Laboratories

Status
Sel Blueframe Os
Vendor
CVE Published:
12 May 2025

What is CVE-2025-46747?

An authenticated user lacking user-management permissions is able to identify other user accounts within the SEL Software. This could potentially expose sensitive information about users and may facilitate further attacks. It is essential for organizations utilizing SEL Software to assess their configurations and implement security measures to mitigate this issue.

Affected Version(s)

SEL Blueframe OS 0 < 1.12.0

References

https://selinc.com/products/software/latest-software-vers...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.