CVE-2023-31173

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20

Description The issue is related to the use of hard-coded credentials in the SEL-5037 SEL Grid Configurator, which allows authentication bypass. For more details, refer to the Instruction Manual Appendix A and Appendix E dated 20230615.

Recommendations For versions prior to 4.5.0.20, update to version 4.5.0.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the SEL Grid Configurator to minimize the risk of exploitation.