Skip to content
OpenAdvisories

Vendor

Schweitzer Engineering Laboratories

63 known vulnerabilities.

Products

SEL-3532 20 SEL-3555 20 SEL-3560S 20 SEL-3560E 20 SEL-3350 20 SEL-3505 19 SEL-3505-3 19 SEL-3530 19 SEL-3530-4 19 SEL-2241 RTAC module 19 SEL Blueframe OS 11 SEL-5030 acSELerator QuickSet Software 6 SEL-451 5 SEL-5037 SEL Grid Configurator 4 SEL-411L 4 SEL-5056 Software-Defined Network Flow Controller 4 SEL-5033 acSELerator RTAC Software 2 AcSELerator Architect 2 SEL-3350-1 1 SEL-3355-2 1 SEL-3360-2 1 SEL-5036 acSELerator Bay Screen Builder Software 1 SEL-700BT Motor Bus Transfer Relay 1 SEL-700G Generator Protection Relay 1 SEL-751 Feeder Protection Relay 1 SEL-787-2/-3/-4 Transformer Protection Relay 1 SEL-787Z High-Impedance Differential Relay 1 SEL-5037 Grid Configurator 1 Compass 1 SEL-710-5 Motor Protection Relay 0 SEL AcSELerator QuickSet 0 R118 0 R119 0 R120 0 R121 0 R122 0 R123 0 R124 0 R125 0 R126 0
All Critical High Medium Low Exploited only Public exploit

63 results · Feed

  • Medium 4.1
    CVE-2023-31166

    Improper Limitation of a Pathname to a Restricted Directory

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders i…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 4.3
    CVE-2023-31165

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 4.3
    CVE-2023-31164

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 4.3
    CVE-2023-31163

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3350 SEL-3532 SEL-3560S
  • Medium 4.8
    CVE-2023-31162

    Improper Input Validation in Web Interface

    An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Servic…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 5.9
    CVE-2023-31161

    Improper Input Validation in Web Interface

    An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See…

    Schweitzer Engineering Laboratories SEL-3560E SEL-3532 SEL-3560S
  • Medium 4.3
    CVE-2023-31160

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 4.3
    CVE-2023-31159

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3532 SEL-3560S SEL-3555
  • Medium 4.3
    CVE-2023-31158

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 4.3
    CVE-2023-31157

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3560S SEL-3555 SEL-3560E
  • Medium 4.3
    CVE-2023-31156

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3532 SEL-3560S SEL-3555
  • Medium 4.3
    CVE-2023-31155

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3560S SEL-3555 SEL-3560E
  • Medium 4.3
    CVE-2023-31154

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3532 SEL-3560S SEL-3555
  • Medium 4.3
    CVE-2023-31153

    Improper Neutralization of Input During Web Page Generation

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and…

    Schweitzer Engineering Laboratories SEL-3532 SEL-3560S SEL-3555
  • Medium 4.0
    CVE-2023-31152

    Authentication Bypass Using an Alternate Path or Channel

    An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more deta…

    Schweitzer Engineering Laboratories SEL-3350 SEL-3532 SEL-3560S
  • Medium 4.7
    CVE-2023-31151

    Improper Certificate Validation

    An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack. See SEL Service Bu…

    Schweitzer Engineering Laboratories SEL-3560E SEL-3350 SEL-3532
  • High 8.0
    CVE-2023-31150

    Storing Passwords in a Recoverable Format

    A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11…

    Schweitzer Engineering Laboratories SEL-3560E SEL-3350 SEL-3532
  • Critical 9.1
    CVE-2023-31149

    Improper Input Validation in Web Interface

    An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for…

    Schweitzer Engineering Laboratories SEL-3560S SEL-3555 SEL-3560E
  • Critical 9.1
    CVE-2023-31148

    Improper Input Validation in Web Interface

    An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for…

    Schweitzer Engineering Laboratories SEL-3555 SEL-3560E SEL-3350
  • Medium 6.8
    CVE-2023-2310

    Channel Accessible by Non-Endpoint

    A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service. See the ACSELE…

    Schweitzer Engineering Laboratories SEL-3560E SEL-3350 SEL-3532
  • Unscored —
    CVE-2018-10600

    SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may…

    Schweitzer Engineering Laboratories AcSELerator Architect
  • Unscored —
    CVE-2018-10604

    SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modifi…

    Schweitzer Engineering Laboratories Compass
  • Unscored —
    CVE-2018-10608 Public exploit

    SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connect…

    Schweitzer Engineering Laboratories AcSELerator Architect