CVEvulnerability

CVE-2017-7928

10.0 CRITICAL Published 2017-08-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
10.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-284

Description

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.

Affected configurations

• selinc sel-3620 firmware r202 • selinc sel-3620 firmware r203 • selinc sel-3620 firmware r203-v • selinc sel-3620 firmware r203-v1 • selinc sel-3620 firmware r204 • selinc sel-3620 firmware r204-v1 • selinc sel-3622 firmware r202 • selinc sel-3622 firmware r203 • selinc sel-3622 firmware r203-v • selinc sel-3622 firmware r203-v1 • selinc sel-3622 firmware r204 • selinc sel-3622 firmware r204-v1

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References