CVE-2023-31174: Selinc Sel-5037 Sel Grid Configurator

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

Affected products

  • Selinc Sel-5037 Sel Grid Configurator: before 4.5.0.20 (fixed in 4.5.0.20)

Published 2023-08-31. Last modified 2026-06-17.