PT-2023-23185

CVE-2023-31151

·

Publicado

2023-05-10

·

Atualizado

2023-05-17

Descrição por

CVSS 3.1
4.7
Média
MétricasAV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) (affected versions not specified)
Description An Improper Certificate Validation issue in the SEL RTAC Web Interface could allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack. The attacker could exploit this issue by intercepting communication between the SEL RTAC and its users, potentially allowing them to steal sensitive information or inject malicious data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾