CVE-2023-34391
31.08.2023, 16:15
Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details. This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| selinc | sel-5033_acselerator_real-time_automation_controller | 𝑥 < 1.35.151.21000 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| schweitzer_engineering_laboratories | sel-5033_acselerator_rtac_software | 𝑥 < 1.35.151.21000 | ADP |
Common Weakness Enumeration
- CWE-277 - Insecure Inherited PermissionsA product defines a set of insecure permissions that are inherited by objects that are created by the program.
- CWE-732 - Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.