medium4.3
CVE-2023-31177
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attac…
Impact
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for more details.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Selinc | Sel-451 Firmware | from r315-v0 before r315-v4 from r316-v0 before r316-v4 from r317-v0 before r317-v4 from r318-v0 before r318-v5 from r320-v0 before r320-v3 from r321-v0 before r321-v3 |