CVE-2023-31176

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL-451 (affected versions not specified)

Description The issue is related to insufficient entropy in the microprogram of the protective relay phase sequence of the Schweitzer Engineering Laboratories SEL-451. This could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. For more details, refer to the product Instruction Manual Appendix A dated 20230830.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.