Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2267 EUVD-2023-33773GHSA-fvhp-qrgg-98fg

Improper input validation could lead to reflection injection attacks

Published Nov 30, 2023 · Updated Aug 2, 2024 · Assigned by SEL

Description

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user.

See product Instruction Manual Appendix A dated 20230830 for more details.

Affected products

VendorProductAffectedFixed
Schweitzer Engineering Laboratories SEL-411L R118-V0 – < R118-V4, R119-V0 – < R119-V5, R120-V0 – < R120-V6, R121-V0 – < R121-V3, R122-V0 – < R122-V3, R123-V0 – < R123-V3, R124-V0 – < R124-V3, R125-V0 – < R125-V3, R126-V0 – < R126-V4, R127-V0 – < R127-V2, R128-V0 – < R128-V1, R129-V0 – < R129-V1 R118-V4

References