Vulnerability Details CVE-2023-2265
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user.
See product Instruction Manual Appendix A dated 20230830 for more details.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.8%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2023-2265
-
cpe:2.3:h:selinc:sel-411l:-
-
cpe:2.3:o:selinc:sel-411l_firmware:r118-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r119-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r120-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r121-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r122-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r123-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r124-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r125-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r126-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r127-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r128-v0
-
cpe:2.3:o:selinc:sel-411l_firmware:r129-v0