CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34392 – Missing Authentication for Critical Function
https://notcve.org/view.php?id=CVE-2023-34392
A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. • https://selinc.com/support/security-notifications/external-reports https://www.nozominetworks.com/blog • CWE-306: Missing Authentication for Critical Function •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-31175 – Execution with Unnecessary Privileges
https://notcve.org/view.php?id=CVE-2023-31175
An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. • https://selinc.com/support/security-notifications/external-reports https://www.nozominetworks.com/blog • CWE-250: Execution with Unnecessary Privileges CWE-269: Improper Privilege Management •
CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-31174 – Cross-Site Request Forgery (CSRF)
https://notcve.org/view.php?id=CVE-2023-31174
A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. • https://selinc.com/support/security-notifications/external-reports https://www.nozominetworks.com/blog • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.4EPSS: 0%CPEs: 2EXPL: 0CVE-2023-31173 – Use of Hard-coded Credentials
https://notcve.org/view.php?id=CVE-2023-31173
Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. • https://selinc.com/support/security-notifications/external-reports https://www.nozominetworks.com/blog • CWE-798: Use of Hard-coded Credentials •