CVE-2023-34388: Selinc Sel-451 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details.

Affected products

• Selinc Sel-451 Firmware: from r315-v0, before r315-v4 (fixed in r315-v4); from r316-v0, before r316-v4 (fixed in r316-v4); from r317-v0, before r317-v4 (fixed in r317-v4); from r318-v0, before r318-v5 (fixed in r318-v5); from r320-v0, before r320-v3 (fixed in r320-v3); from r321-v0, before r321-v3 (fixed in r321-v3); …

Published 2023-11-30. Last modified 2026-06-17.