CVEvulnerability
CVE-2023-2264
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-20
Description
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior.
See product Instruction Manual Appendix A dated 20230830 for more details.
Affected configurations
• selinc sel-411l firmware (>= r118-v0 < r118-v4)
• selinc sel-411l firmware (>= r119-v0 < r119-v5)
• selinc sel-411l firmware (>= r120-v0 < r120-v6)
• selinc sel-411l firmware (>= r121-v0 < r121-v3)
• selinc sel-411l firmware (>= r122-v0 < r122-v3)
• selinc sel-411l firmware (>= r123-v0 < r123-v3)
• selinc sel-411l firmware (>= r124-v0 < r124-v3)
• selinc sel-411l firmware (>= r125-v0 < r125-v3)
• selinc sel-411l firmware (>= r126-v0 < r126-v4)
• selinc sel-411l firmware (>= r127-v0 < r127-v2)
• selinc sel-411l firmware r128-v0
• selinc sel-411l firmware r129-v0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness