Description
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file.
See SEL Service Bulletin dated 2022-11-15 for more details.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schweitzer Engineering Laboratories | SEL-3505 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3505-3 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3530 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3530-4 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3532 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3555 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3560S | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3560E | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-2241 RTAC module | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |
| Schweitzer Engineering Laboratories | SEL-3350 | R149-V0 – < R150-V2, R149-V0 – < R149-V4 | R150-V2 |