Description
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.
See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.
This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schweitzer Engineering Laboratories | SEL-5030 acSELerator QuickSet Software | ≤ 7.1.3.0 | — |