Unrated severityNVD Advisory· Published May 10, 2023· Updated Jan 24, 2025

Improper Neutralization of Input During Web Page Generation

CVE-2023-31160

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.

See SEL Service Bulletin dated 2022-11-15 for more details.

Affected products

Schweitzer Engineering Laboratories/Sel 3530 4v5
Range: R132-V0
Schweitzer Engineering Laboratories/Sel 3560sv5
Range: R144-V2
Schweitzer Engineering Laboratories, Inc./Sel 3530v5
Range: R132-V0
Schweitzer Engineering Laboratories, Inc./Sel 3555v5
Range: R134-V0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

selinc.com/support/security-notifications/external-reports/mitre
www.nozominetworks.com/blog/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000