CVE-2023-34389

An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time.



See product Instruction Manual Appendix A dated 20230830 for more details.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
SELCNA
4.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
selincsel-451_firmware
r315-v0 ≤
𝑥
< r315-v4
selincsel-451_firmware
r316-v0 ≤
𝑥
< r316-v4
selincsel-451_firmware
r317-v0 ≤
𝑥
< r317-v4
selincsel-451_firmware
r318-v0 ≤
𝑥
< r318-v5
selincsel-451_firmware
r320-v0 ≤
𝑥
< r320-v3
selincsel-451_firmware
r321-v0 ≤
𝑥
< r321-v3
selincsel-451_firmware
r322-v0 ≤
𝑥
< r322-v3
selincsel-451_firmware
r323-v0 ≤
𝑥
< r323-v5
selincsel-451_firmware
r324-v0 ≤
𝑥
< r324-v4
selincsel-451_firmware
r325-v0 ≤
𝑥
< r325-v3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://selinc.com/support/security-notifications/external-reports/
https://www.nozominetworks.com/blog/
https://selinc.com/support/security-notifications/external-reports/
https://www.nozominetworks.com/blog/