Description
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 for more details.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schweitzer Engineering Laboratories SEL-3532
Default version status: unaffected
R143-V0 to < R150-V2affectedR143-V0 to < R149-V4affectedR143-V0 to < R148-V7affectedR143-V0 to < R147-V6affected
Schweitzer Engineering Laboratories SEL-3555
Default version status: unaffected
R143-V0 to < R150-V2affectedR143-V0 to < R149-V4affectedR143-V0 to < R148-V7affectedR143-V0 to < R147-V6affected
Schweitzer Engineering Laboratories SEL-3560S
Default version status: unaffected
R144-V2 to < R150-V2affectedR144-V2 to < R149-V4affectedR144-V2 to < R148-V7affectedR144-V2 to < R147-V6affected
Schweitzer Engineering Laboratories SEL-3560E
Default version status: unaffected
R144-V2 to < R150-V2affectedR144-V2 to < R149-V4affectedR144-V2 to < R148-V7affectedR144-V2 to < R147-V6affected
Schweitzer Engineering Laboratories SEL-3350
Default version status: unaffected
R148-V0 to < R150-V2affectedR148-V0 to < R149-V4affectedR148-V0 to < R148-V7affected