Description
An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication.
See product Instruction Manual Appendix A dated 20230830 for more details.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schweitzer Engineering Laboratories | SEL-451 | R315-V0 – < R315-V4, R316-V0 – < R316-V4, R317-V0 – < R317-V4, R318-V0 – < R318-V5, R320-V0 – < R320-V3, R321-V0 – < R321-V3, R322-V0 – < R322-V3, R323-V0 – < R323-V5, R324-V0 – < R324-V4, R325-V0 – < R325-V3, R326-V0 – < R326-V1, R327-V0 – < R327-V1 | R315-V4 |