CVE-2023-34391

Name of the Vulnerable Software and Affected Versions Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software versions prior to 1.35.151.21000

Description The issue is related to incorrect permission assignment for a critical resource, allowing an attacker to manipulate data in configuration files. This can be exploited to leverage or manipulate configuration file search paths.

Recommendations For versions prior to 1.35.151.21000, update to version 1.35.151.21000 or later to resolve the issue. As a temporary workaround, consider restricting access to configuration files and limiting privileges to minimize the risk of exploitation.