Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-2310 EUVD-2023-33815GHSA-72xh-xv88-97qg

Channel Accessible by Non-Endpoint

Published May 10, 2023 · Updated Jan 27, 2025 · Assigned by SEL

Description

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.

See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.

Affected products

VendorProductAffectedFixed
Schweitzer Engineering Laboratories SEL-3505 R119-V0 – < R150-V2, R119-V0 – < R149-V4, R119-V0 – < R148-V7, R119-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3505-3 R132-V0 – < R150-V2, R132-V0 – < R149-V4, R132-V0 – < R148-V7, R132-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3530 R100-V0 – < R150-V2, R100-V0 – < R149-V4, R100-V0 – < R148-V7, R100-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3530-4 R108-V0 – < R150-V2, R108-V0 – < R149-V4, R108-V0 – < R148-V7, R108-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3532 R132-V0 – < R150-V2, R132-V0 – < R149-V4, R132-V0 – < R148-V7, R132-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3555 R134-V0 – < R150-V2, R134-V0 – < R149-V4, R134-V0 – < R148-V7, R134-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3560S R144-V2 – < R150-V2, R144-V2 – < R149-V4, R144-V2 – < R148-V7, R144-V2 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3560E R144-V2 – < R150-V2, R144-V2 – < R149-V4, R144-V2 – < R148-V7, R144-V2 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-2241 RTAC module R113-V0 – < R150-V2, R113-V0 – < R149-V4, R113-V0 – < R148-V7, R113-V0 – < R147-V6 R150-V2
Schweitzer Engineering Laboratories SEL-3350 R148-V0 – < R150-V2, R148-V0 – < R149-V4, R148-V0 – < R148-V7 R150-V2

References