selinc records

47 published records for vendor selinc.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

47 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2017-7928No exploit	An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versionsselinc · sel-3620 firmware · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	2.2%	Aug 7, 2017
40Plan	CVE-2018-10600No exploit	SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure andselinc · acselerator architect · CWE-611 pre-auth RCE XXE	Critical9.8	—	2.4%	Jul 24, 2018
39Monitor	CVE-2023-31176No exploit	Insufficient entropy vulnerability could lead to authentication bypassselinc · sel-451 firmware · CWE-331 Pre-auth Auth bypass	Critical9.8	—	0.9%	Nov 30, 2023
39Monitor	CVE-2023-34388No exploit	Improper authentication could lead to session hijackingselinc · sel-451 firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.9%	Nov 30, 2023
39Monitor	CVE-2023-31175No exploit	Execution with Unnecessary Privilegesselinc · sel-5037 sel grid configurator · CWE-250 Pre-auth	Critical9.8	—	0.4%	Aug 31, 2023
35Monitor	CVE-2018-10604No exploit	SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwritingselinc · sel compass · CWE-276	High8.8	—	1.6%	Jul 24, 2018
35Monitor	CVE-2023-31149No exploit	Improper Input Validation in Web Interfaceselinc · sel-2241 rtac module firmware · CWE-20 RCE	High8.8	—	1.0%	May 10, 2023
35Monitor	CVE-2023-31148No exploit	Improper Input Validation in Web Interfaceselinc · sel-2241 rtac module firmware · CWE-20 RCE	High8.8	—	1.0%	May 10, 2023
35Monitor	CVE-2023-31161No exploit	Improper Input Validation in Web Interfaceselinc · sel-3350 firmware · CWE-20	High8.8	—	0.5%	May 10, 2023
35Monitor	CVE-2023-34392No exploit	Missing Authentication for Critical Functionselinc · sel-5037 sel grid configurator · CWE-306 Pre-auth Auth bypass	High8.8	—	0.4%	Aug 31, 2023
35Monitor	CVE-2023-31152No exploit	Authentication Bypass Using an Alternate Path or Channelselinc · sel-2241 rtac module firmware · CWE-288 Auth bypass	High8.8	—	0.3%	May 10, 2023
33Monitor	CVE-2023-31173No exploit	Use of Hard-coded Credentialsselinc · sel-5037 sel grid configurator · CWE-798 Auth bypass Hard-coded credentials	High8.4	—	0.2%	Aug 31, 2023
32Monitor	CVE-2018-10608Proof of concept	SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP selinc · acselerator architect · CWE-400 Pre-auth Denial of service	High7.5	—	7.8%	Jul 24, 2018
32Monitor	CVE-2023-31167No exploit	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')selinc · sel-5036 acselerator bay screen builder · CWE-22 Path traversal	High8.1	—	0.4%	Aug 31, 2023
31Monitor	CVE-2023-2264No exploit	Improper input validition could lead to code injectionselinc · sel-411l firmware · CWE-20 RCE	High7.8	—	0.2%	Nov 30, 2023
29Monitor	CVE-2013-2792No exploit	Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of sselinc · sel-2241 · CWE-20 Pre-auth Denial of service	High7.1	—	1.8%	Aug 9, 2013
29Monitor	CVE-2023-31172No exploit	Incomplete Filtering of Special Elementsselinc · sel-5030 acselerator quickset · CWE-791 Pre-auth	High7.4	—	0.3%	Aug 31, 2023
26Monitor	CVE-2023-34389No exploit	Allocation of resources without limits could lead to denial of serviceselinc · sel-451 firmware · CWE-770 Denial of service	Medium6.5	—	0.6%	Nov 30, 2023
26Monitor	CVE-2023-34390No exploit	Improper input validation could lead to denial of serviceselinc · sel-451 firmware · CWE-20 Denial of service	Medium6.5	—	0.6%	Nov 30, 2023
26Monitor	CVE-2023-31150No exploit	Storing Passwords in a Recoverable Formatselinc · sel-2241 rtac module firmware · CWE-257	Medium6.5	—	0.4%	May 10, 2023
26Monitor	CVE-2023-31168No exploit	Inclusion of Functionality from Untrusted Control Sphereselinc · sel-5030 acselerator quickset · CWE-829 Pre-auth	Medium6.5	—	0.3%	Aug 31, 2023
26Monitor	CVE-2023-31170No exploit	Inclusion of Functionality from Untrusted Control Sphereselinc · sel-5030 acselerator quickset · CWE-829 Pre-auth	Medium6.5	—	0.3%	Aug 31, 2023
26Monitor	CVE-2023-31171No exploit	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')selinc · sel-5030 acselerator quickset · CWE-89 Pre-auth SQL injection	Medium6.5	—	0.3%	Aug 31, 2023
26Monitor	CVE-2023-31174No exploit	Cross-Site Request Forgery (CSRF)selinc · sel-5037 sel grid configurator · CWE-352 Pre-auth CSRF	Medium6.5	—	0.2%	Aug 31, 2023
24Monitor	CVE-2013-0665No exploit	Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which selinc · acselerator quickset · CWE-264 Local privilege escalation	Medium6.2	—	1.1%	Mar 21, 2013

CVE-2017-7928
41Plan
An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions
CriticalCVSS 10.0No exploitEPSS 2%
- Pre-auth
- Broken access control (IDOR)
selinc · sel-3620 firmwareAug 7, 2017
CVE-2018-10600
40Plan
SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- XXE
selinc · acselerator architectJul 24, 2018
CVE-2023-31176
39Monitor
Insufficient entropy vulnerability could lead to authentication bypass
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
selinc · sel-451 firmwareNov 30, 2023
CVE-2023-34388
39Monitor
Improper authentication could lead to session hijacking
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
selinc · sel-451 firmwareNov 30, 2023
CVE-2023-31175
39Monitor
Execution with Unnecessary Privileges
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
selinc · sel-5037 sel grid configuratorAug 31, 2023
CVE-2018-10604
35Monitor
SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting
HighCVSS 8.8No exploitEPSS 1%
selinc · sel compassJul 24, 2018
CVE-2023-31149
35Monitor
Improper Input Validation in Web Interface
HighCVSS 8.8No exploitEPSS 1%
- RCE
selinc · sel-2241 rtac module firmwareMay 10, 2023
CVE-2023-31148
35Monitor
Improper Input Validation in Web Interface
HighCVSS 8.8No exploitEPSS 1%
- RCE
selinc · sel-2241 rtac module firmwareMay 10, 2023
CVE-2023-31161
35Monitor
Improper Input Validation in Web Interface
HighCVSS 8.8No exploitEPSS 0%
selinc · sel-3350 firmwareMay 10, 2023
CVE-2023-34392
35Monitor
Missing Authentication for Critical Function
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
selinc · sel-5037 sel grid configuratorAug 31, 2023
CVE-2023-31152
35Monitor
Authentication Bypass Using an Alternate Path or Channel
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
selinc · sel-2241 rtac module firmwareMay 10, 2023
CVE-2023-31173
33Monitor
Use of Hard-coded Credentials
HighCVSS 8.4No exploitEPSS 0%
- Auth bypass
- Hard-coded credentials
selinc · sel-5037 sel grid configuratorAug 31, 2023
CVE-2018-10608
32Monitor
SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP
HighCVSS 7.5Proof of conceptEPSS 7%
- Pre-auth
- Denial of service
selinc · acselerator architectJul 24, 2018
CVE-2023-31167
32Monitor
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
selinc · sel-5036 acselerator bay screen builderAug 31, 2023
CVE-2023-2264
31Monitor
Improper input validition could lead to code injection
HighCVSS 7.8No exploitEPSS 0%
- RCE
selinc · sel-411l firmwareNov 30, 2023
CVE-2013-2792
29Monitor
Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of s
HighCVSS 7.1No exploitEPSS 1%
- Pre-auth
- Denial of service
selinc · sel-2241Aug 9, 2013
CVE-2023-31172
29Monitor
Incomplete Filtering of Special Elements
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
selinc · sel-5030 acselerator quicksetAug 31, 2023
CVE-2023-34389
26Monitor
Allocation of resources without limits could lead to denial of service
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
selinc · sel-451 firmwareNov 30, 2023
CVE-2023-34390
26Monitor
Improper input validation could lead to denial of service
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
selinc · sel-451 firmwareNov 30, 2023
CVE-2023-31150
26Monitor
Storing Passwords in a Recoverable Format
MediumCVSS 6.5No exploitEPSS 0%
selinc · sel-2241 rtac module firmwareMay 10, 2023
CVE-2023-31168
26Monitor
Inclusion of Functionality from Untrusted Control Sphere
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
selinc · sel-5030 acselerator quicksetAug 31, 2023
CVE-2023-31170
26Monitor
Inclusion of Functionality from Untrusted Control Sphere
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
selinc · sel-5030 acselerator quicksetAug 31, 2023
CVE-2023-31171
26Monitor
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- SQL injection
selinc · sel-5030 acselerator quicksetAug 31, 2023
CVE-2023-31174
26Monitor
Cross-Site Request Forgery (CSRF)
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
selinc · sel-5037 sel grid configuratorAug 31, 2023
CVE-2013-0665
24Monitor
Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which
MediumCVSS 6.2No exploitEPSS 1%
- Local privilege escalation
selinc · acselerator quicksetMar 21, 2013