Lucene search

[email protected]CVE-2023-31167

HistoryAug 31, 2023 - 4:15 p.m.

CVE-2023-31167

2023-08-3116:15:08

CWE-22

[email protected]

web.nvd.nist.gov

cve-2023-31167

path traversal

sel-5036

acselerator bay screen builder

software

windows

vulnerability

patch

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal.

SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details.

This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.

Affected configurations

NVD

Node

selincsel-5036_acselerator_bay_screen_builderRange<1.0.49152.778

AND

microsoftwindowsMatch-

CPENameOperatorVersion
selinc:sel-5036_acselerator_bay_screen_builderselinc sel-5036 acselerator bay screen builderlt1.0.49152.778

CPE	Name	Operator	Version
selinc:sel-5036_acselerator_bay_screen_builder	selinc sel-5036 acselerator bay screen builder	lt	1.0.49152.778

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "SEL-5036 acSELerator Bay Screen Builder Software",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "1.0.49152.778",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

dragos.com

selinc.com/support/security-notifications/external-reports/

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

Related for CVE-2023-31167

prion1 nvd1 cvelist1