CVE-2023-34392CWE-306

Missing Authentication for Critical Function

High · published August 31, 2023

CVSS v3.1
8.2
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator.

See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.

This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00453 · 38.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-08-31T15:31Z
EPSS history
Timeline
  • 31 AUG 15:31Z
    Missing Authentication for Critical Function
    cvelistv5