6.5
CVE-2023-34389
- EPSS 0.66%
- Veröffentlicht 30.11.2023 17:15:09
- Zuletzt bearbeitet 21.11.2024 08:07:09
- CVE-Watchlists
- Unerledigt
LoginAllocation of resources without limits could lead to denial of service
An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more details.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Selinc ≫ Sel-451 Firmware Version >= r315-v0 < r315-v4
Selinc ≫ Sel-451 Firmware Version >= r316-v0 < r316-v4
Selinc ≫ Sel-451 Firmware Version >= r317-v0 < r317-v4
Selinc ≫ Sel-451 Firmware Version >= r318-v0 < r318-v5
Selinc ≫ Sel-451 Firmware Version >= r320-v0 < r320-v3
Selinc ≫ Sel-451 Firmware Version >= r321-v0 < r321-v3
Selinc ≫ Sel-451 Firmware Version >= r322-v0 < r322-v3
Selinc ≫ Sel-451 Firmware Version >= r323-v0 < r323-v5
Selinc ≫ Sel-451 Firmware Version >= r324-v0 < r324-v4
Selinc ≫ Sel-451 Firmware Version >= r325-v0 < r325-v3
Selinc ≫ Sel-451 Firmware Versionr326-v0
Selinc ≫ Sel-451 Firmware Versionr327-v0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.66% | 0.468 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| security@selinc.com | 4.5 | 0.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://selinc.com/support/security-notifications/external-reports/
https://www.nozominetworks.com/blog/