Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-2265

Improper restriction of rendered UI layers or frames could lead to clickjacking attack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEL

Description

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schweitzer Engineering Laboratories SEL-411L

Default version status: unaffected

  • R118-V0 to < R118-V4affected
  • R119-V0 to < R119-V5affected
  • R120-V0 to < R120-V6affected
  • R121-V0 to < R121-V3affected
  • R122-V0 to < R122-V3affected
  • R123-V0 to < R123-V3affected
  • R124-V0 to < R124-V3affected
  • R125-V0 to < R125-V3affected
  • R126-V0 to < R126-V4affected
  • R127-V0 to < R127-V2affected
  • R128-V0 to < R128-V1affected
  • R129-V0 to < R129-V1affected

References