Approved changes feed: RSS · Atom

cpe:2.3:o:selinc:sel-3555_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSelinc (e63d0bf7-b1b6-57e8-b404-39515cb45629)
ProductSel 3555 Firmware (34f3688f-57dc-5544-901c-035a07be33be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31166 vulnerable 2026-06-08 06:04:42.007984 Improper Limitation of a Pathname to a Restricted Directory
MEDIUM (4.1)
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL Service Bulletin dated 2022-11-15 for more details.
Published: 2023-05-10T19:25:59.606Z
Updated: 2025-01-24T19:28:19.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31165 vulnerable 2026-06-08 06:04:42.005910 Improper Neutralization of Input During Web Page Generation
MEDIUM (4.3)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.
Published: 2023-05-10T19:25:34.186Z
Updated: 2025-01-24T19:27:55.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31164 vulnerable 2026-06-08 06:04:41.996075 Improper Neutralization of Input During Web Page Generation
MEDIUM (4.3)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.
Published: 2023-05-10T19:25:16.534Z
Updated: 2025-01-24T19:27:38.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31163 vulnerable 2026-06-08 06:04:41.993860 Improper Neutralization of Input During Web Page Generation
MEDIUM (4.3)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.
Published: 2023-05-10T19:24:45.965Z
Updated: 2025-01-24T19:27:13.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31162 vulnerable 2026-06-08 06:04:41.991239 Improper Input Validation in Web Interface
MEDIUM (4.8)
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details.
Published: 2023-05-10T19:24:20.480Z
Updated: 2025-01-24T19:26:55.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31161 vulnerable 2026-06-08 06:04:41.989671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31160 vulnerable 2026-06-08 06:04:41.988365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31159 vulnerable 2026-06-08 06:04:41.986298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31158 vulnerable 2026-06-08 06:04:41.984278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31157 vulnerable 2026-06-08 06:04:41.981811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31156 vulnerable 2026-06-08 06:04:41.979937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31155 vulnerable 2026-06-08 06:04:41.977720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31154 vulnerable 2026-06-08 06:04:41.975136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31153 vulnerable 2026-06-08 06:04:41.968380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31152 vulnerable 2026-06-08 06:04:41.965704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31151 vulnerable 2026-06-08 06:04:41.963527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31150 vulnerable 2026-06-08 06:04:41.961814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31149 vulnerable 2026-06-08 06:04:41.959603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31148 vulnerable 2026-06-08 06:04:41.953816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2310 vulnerable 2026-06-08 06:02:42.045087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.