60
CVE-2023-31166
—CVSS 3.1
4.3 medium
EPSS
<1%p46
Published
()
Modified
Description
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL Service Bulletin dated 2022-11-15 for more details.
- Vendors
- selinc
- Products
- sel-2241 rtac module firmware, sel-3350 firmware, sel-3505 firmware, sel-3505-3 firmware, sel-3530 firmware, sel-3530-4 firmware, sel-3532 firmware, sel-3555 firmware, sel-3560e firmware, sel-3560s firmware
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N