Vulnerability Details CVE-2023-31151
An Improper Certificate Validation vulnerability
in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface
could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack.
See SEL Service Bulletin dated 2022-11-15 for more details.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.7%
CVSS Severity
CVSS v3 Score 4.7
References
Products affected by CVE-2023-31151
-
cpe:2.3:h:selinc:sel-2241_rtac_module:-
-
cpe:2.3:h:selinc:sel-3350:-
-
cpe:2.3:h:selinc:sel-3505-3:-
-
cpe:2.3:h:selinc:sel-3505:-
-
cpe:2.3:h:selinc:sel-3530-4:-
-
cpe:2.3:h:selinc:sel-3530:-
-
cpe:2.3:h:selinc:sel-3532:-
-
cpe:2.3:h:selinc:sel-3555:-
-
cpe:2.3:h:selinc:sel-3560e:-
-
cpe:2.3:h:selinc:sel-3560s:-
-
cpe:2.3:o:selinc:sel-2241_rtac_module_firmware:*
-
cpe:2.3:o:selinc:sel-3350_firmware:*
-
cpe:2.3:o:selinc:sel-3505-3_firmware:*
-
cpe:2.3:o:selinc:sel-3505_firmware:*
-
cpe:2.3:o:selinc:sel-3530-4_firmware:*
-
cpe:2.3:o:selinc:sel-3530_firmware:*
-
cpe:2.3:o:selinc:sel-3532_firmware:*
-
cpe:2.3:o:selinc:sel-3555_firmware:*
-
cpe:2.3:o:selinc:sel-3560e_firmware:*
-
cpe:2.3:o:selinc:sel-3560s_firmware:*