Selinc Sel-451 Firmware vulnerabilities

5 CVEs affecting Selinc Sel-451 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34390, published 2023-11-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-31176, published 2023-11-30. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See…
CVE-2023-34388, published 2023-11-30. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass…
CVE-2023-34390, published 2023-11-30. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out…
CVE-2023-34389, published 2023-11-30. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for…
CVE-2023-31177, published 2023-11-30. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute…