Lucene search

[email protected]CVE-2023-31173

HistoryAug 31, 2023 - 4:15 p.m.

CVE-2023-31173

2023-08-3116:15:09

CWE-798

[email protected]

web.nvd.nist.gov

cve-2023-31173

schweitzer engineering laboratories

sel-5037

sel grid configurator

windows

authentication bypass

hard-coded credentials

nvd

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass.

See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.

This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

Affected configurations

NVD

Node

selincsel-5037_sel_grid_configuratorRange<4.5.0.20

AND

microsoftwindowsMatch-

CPENameOperatorVersion
selinc:sel-5037_sel_grid_configuratorselinc sel-5037 sel grid configuratorlt4.5.0.20

CPE	Name	Operator	Version
selinc:sel-5037_sel_grid_configurator	selinc sel-5037 sel grid configurator	lt	4.5.0.20

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "SEL-5037 SEL Grid Configurator",
    "vendor": "Schweitzer Engineering Laboratories",
    "versions": [
      {
        "lessThan": "4.5.0.20",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

selinc.com/support/security-notifications/external-reports/

www.nozominetworks.com/blog/

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

Related for CVE-2023-31173

nvd1 cvelist1 prion1