Advisories · Technology

Schweitzer Engineering Laboratories SEL-3505.

Every CVE that names Schweitzer Engineering Laboratories SEL-3505 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-31166 CVE record

CVSS 4.1 Medium

Improper Limitation of a Pathname to a Restricted Directory
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Path traversal
Not analysed yet 10 May 2023
CVE-2023-31165 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31164 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31163 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31162 CVE record

CVSS 4.8 Medium

Improper Input Validation in Web Interface
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- CWE-20
Not analysed yet 10 May 2023
CVE-2023-31160 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31159 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31158 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31157 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31156 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31155 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31154 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31153 CVE record

CVSS 4.3 Medium

Improper Neutralization of Input During Web Page Generation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Cross-site scripting (XSS)
Not analysed yet 10 May 2023
CVE-2023-31152 CVE record

CVSS 4.0 Medium

Authentication Bypass Using an Alternate Path or Channel
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Authentication bypass
Not analysed yet 10 May 2023
CVE-2023-31151 CVE record

CVSS 4.7 Medium

Improper Certificate Validation
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- Weak cryptography or TLS
Not analysed yet 10 May 2023
CVE-2023-31150 CVE record

CVSS 8.0 High

Storing Passwords in a Recoverable Format
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- CWE-257
Not analysed yet 10 May 2023
CVE-2023-31149 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper Input Validation in Web Interface
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- CWE-20
Not analysed yet 10 May 2023
CVE-2023-31148 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper Input Validation in Web Interface
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories SEL-3505-3
- CWE-20
Not analysed yet 10 May 2023
CVE-2023-2310 CVE record

CVSS 6.8 Medium

Channel Accessible by Non-Endpoint
- Schweitzer Engineering Laboratories SEL-3505
- Schweitzer Engineering Laboratories, Inc. SEL-3505-3
- CWE-300
Not analysed yet 10 May 2023