Description
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system.
See product Instruction Manual Appendix A dated 20230830 for more details.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schweitzer Engineering Laboratories | SEL-451 | R315-V0 – < R315-V4, R316-V0 – < R316-V4, R317-V0 – < R317-V4, R318-V0 – < R318-V5, R320-V0 – < R320-V3, R321-V0 – < R321-V3, R322-V0 – < R322-V3, R323-V0 – < R323-V5, R324-V0 – < R324-V4, R325-V0 – < R325-V3, R326-V0 – < R326-V1, R327-V0 – < R327-V1 | R315-V4 |