CVE-2023-31166: Schweitzer Engineering Laboratories SEL-3505

Описание

Оригинално описание

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL Service Bulletin dated 2022-11-15 for more details.

Засегнати продукти

• Schweitzer Engineering Laboratories SEL-3505: R126-V0 преди R150-V2; R126-V0 преди R149-V4; R126-V0 преди R148-V7; R126-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3505-3: R132-V0 преди R150-V2; R132-V0 преди R149-V4; R132-V0 преди R148-V7; R132-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3530: R126-V0 преди R150-V2; R126-V0 преди R149-V4; R126-V0 преди R148-V7; R126-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3530-4: R126-V0 преди R150-V2; R126-V0 преди R149-V4; R126-V0 преди R148-V7; R126-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3532: R132-V0 преди R150-V2; R132-V0 преди R149-V4; R132-V0 преди R148-V7; R132-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3555: R134-V0 преди R150-V2; R134-V0 преди R149-V4; R134-V0 преди R148-V7; R134-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3560S: R144-V2 преди R150-V2; R144-V2 преди R149-V4; R144-V2 преди R148-V7; R144-V2 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3560E: R144-V2 преди R150-V2; R144-V2 преди R149-V4; R144-V2 преди R148-V7; R144-V2 преди R147-V6
• Schweitzer Engineering Laboratories SEL-2241 RTAC module: R126-V0 преди R150-V2; R126-V0 преди R149-V4; R126-V0 преди R148-V7; R126-V0 преди R147-V6
• Schweitzer Engineering Laboratories SEL-3350: R148-V0 преди R150-V2; R148-V0 преди R149-V4; R148-V0 преди R148-V7

Вид слабост

• CWE-22 Неправилно ограничаване на път до позволена директория

История

Други уязвимости в Schweitzer Engineering Laboratories SEL-3505

• 4.3CVE-2023-31165
• 4.3CVE-2023-31164
• 4.3CVE-2023-31163
• 4.8CVE-2023-31162
• 5.9CVE-2023-31161

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-31166
• https://nvd.nist.gov/vuln/detail/CVE-2023-31166
• https://selinc.com/support/security-notifications/external-reports/
• https://www.nozominetworks.com/blog/