6.1

CVE-2023-31177

An Improper Neutralization of Input During Web Page Generation  ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system.



See product Instruction Manual Appendix A dated 20230830 for more details.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Selinc ≫ Sel-451 Firmware Version >= r315-v0 < r315-v4
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r316-v0 < r316-v4
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r317-v0 < r317-v4
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r318-v0 < r318-v5
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r320-v0 < r320-v3
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r321-v0 < r321-v3
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r322-v0 < r322-v3
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r323-v0 < r323-v5
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r324-v0 < r324-v4
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Version >= r325-v0 < r325-v3
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Versionr326-v0
   Selinc ≫ Sel-451 Version-
Selinc ≫ Sel-451 Firmware Versionr327-v0
   Selinc ≫ Sel-451 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.381
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
security@selinc.com 4.3 0.9 3.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.