Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-34388 EUVD-2023-38468GHSA-592f-7j4r-r9vv

Improper authentication could lead to session hijacking

Published Nov 30, 2023 · Updated Jun 3, 2025 · Assigned by SEL

Description

An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication.

See product Instruction Manual Appendix A dated 20230830 for more details.

Affected products

VendorProductAffectedFixed
Schweitzer Engineering Laboratories SEL-451 R315-V0 – < R315-V4, R316-V0 – < R316-V4, R317-V0 – < R317-V4, R318-V0 – < R318-V5, R320-V0 – < R320-V3, R321-V0 – < R321-V3, R322-V0 – < R322-V3, R323-V0 – < R323-V5, R324-V0 – < R324-V4, R325-V0 – < R325-V3, R326-V0 – < R326-V1, R327-V0 – < R327-V1 R315-V4

References