Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqhh-mfcp-4mcw

Опубликовано: 31 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator.

See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.

This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator.

See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.

This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

EPSS

Процентиль: 25%
0.00088
Низкий

8.2 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 8.2
nvd
больше 2 лет назад

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

EPSS

Процентиль: 25%
0.00088
Низкий

8.2 High

CVSS3

Дефекты

CWE-306