https://vulnogram.org/ Most recent CVEs assigned by Schweitzer Engineering Laboratories, Inc. (sel). https://vulnogram.org/seaview/icons/sel.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-48018 https://vulnogram.org/CVE-2025-48018 An authenticated user can modify application state data. High Tue, 20 May 2025 15:14:36 GMT https://vulnogram.org/CVE-2025-48017 https://vulnogram.org/CVE-2025-48017 Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files Critical Network Exploitable Tue, 20 May 2025 15:14:02 GMT https://vulnogram.org/CVE-2025-48016 https://vulnogram.org/CVE-2025-48016 OpenFlow discovery protocol can exhaust resources because it is not rate limited Medium Tue, 20 May 2025 15:12:20 GMT https://vulnogram.org/CVE-2025-48015 https://vulnogram.org/CVE-2025-48015 Failed login response could be different depending on whether the username was local or central. Low Network Exploitable Tue, 20 May 2025 15:11:53 GMT https://vulnogram.org/CVE-2025-48014 https://vulnogram.org/CVE-2025-48014 Password guessing limits could be bypassed when using LDAP authentication. High Network Exploitable Tue, 20 May 2025 15:10:54 GMT https://vulnogram.org/CVE-2025-46743 https://vulnogram.org/CVE-2025-46743 An authenticated user's token could be used by another source after the user had logged out prior to the token expiring. Medium Mon, 12 May 2025 16:14:05 GMT https://vulnogram.org/CVE-2025-46750 https://vulnogram.org/CVE-2025-46750 SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set. Medium Mon, 12 May 2025 16:13:03 GMT https://vulnogram.org/CVE-2025-46749 https://vulnogram.org/CVE-2025-46749 An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution. Medium Mon, 12 May 2025 16:12:25 GMT https://vulnogram.org/CVE-2025-46748 https://vulnogram.org/CVE-2025-46748 An authenticated user attempting to change their password could do so without using the current password. Low Mon, 12 May 2025 16:12:07 GMT https://vulnogram.org/CVE-2025-46747 https://vulnogram.org/CVE-2025-46747 An authenticated user without user-management permissions could identify other user accounts. Medium Mon, 12 May 2025 16:11:52 GMT https://vulnogram.org/CVE-2025-46746 https://vulnogram.org/CVE-2025-46746 An administrator could discover another account's credentials. Medium Mon, 12 May 2025 16:11:33 GMT https://vulnogram.org/CVE-2025-46745 https://vulnogram.org/CVE-2025-46745 An authenticated user without user-management permissions could view other users account information. Medium Mon, 12 May 2025 16:11:08 GMT https://vulnogram.org/CVE-2025-46744 https://vulnogram.org/CVE-2025-46744 An authenticated administrator could modify the Created By username for a user account Low Mon, 12 May 2025 16:10:29 GMT https://vulnogram.org/CVE-2025-46742 https://vulnogram.org/CVE-2025-46742 Users who were required to change their password could still access system information before changing their password Medium Mon, 12 May 2025 16:10:09 GMT https://vulnogram.org/CVE-2025-46741 https://vulnogram.org/CVE-2025-46741 A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred. Medium Mon, 12 May 2025 16:09:53 GMT https://vulnogram.org/CVE-2025-46740 https://vulnogram.org/CVE-2025-46740 An authenticated user without user administrative permissions could change the administrator Account Name. High Mon, 12 May 2025 16:09:22 GMT https://vulnogram.org/CVE-2025-46739 https://vulnogram.org/CVE-2025-46739 An unauthenticated user could discover account credentials via a brute-force attack without rate limiting High Network Exploitable Mon, 12 May 2025 16:08:38 GMT https://vulnogram.org/CVE-2025-46738 https://vulnogram.org/CVE-2025-46738 An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code. Medium Mon, 12 May 2025 16:07:02 GMT https://vulnogram.org/CVE-2025-46737 https://vulnogram.org/CVE-2025-46737 SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from u… High Network Exploitable Mon, 12 May 2025 16:06:23 GMT https://vulnogram.org/CVE-2024-2103 https://vulnogram.org/CVE-2024-2103 Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, S… Medium Thu, 04 Apr 2024 15:18:01 GMT https://vulnogram.org/CVE-2023-2267 https://vulnogram.org/CVE-2023-2267 An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 fo… Medium Network Exploitable Thu, 30 Nov 2023 16:58:44 GMT https://vulnogram.org/CVE-2023-2266 https://vulnogram.org/CVE-2023-2266 An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instru… Medium Network Exploitable Thu, 30 Nov 2023 16:57:34 GMT https://vulnogram.org/CVE-2023-2265 https://vulnogram.org/CVE-2023-2265 An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instru… Medium Network Exploitable Thu, 30 Nov 2023 16:55:55 GMT https://vulnogram.org/CVE-2023-2264 https://vulnogram.org/CVE-2023-2264 An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendi… Medium Thu, 30 Nov 2023 16:55:28 GMT https://vulnogram.org/CVE-2023-34390 https://vulnogram.org/CVE-2023-34390 An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services. See product Instruction Manual Appendix A date… Medium Thu, 30 Nov 2023 16:54:54 GMT https://vulnogram.org/CVE-2023-34389 https://vulnogram.org/CVE-2023-34389 An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruct… Medium Thu, 30 Nov 2023 16:54:29 GMT https://vulnogram.org/CVE-2023-34388 https://vulnogram.org/CVE-2023-34388 An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Append… Medium Thu, 30 Nov 2023 16:54:08 GMT https://vulnogram.org/CVE-2023-31177 https://vulnogram.org/CVE-2023-31177 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Ins… Medium Thu, 30 Nov 2023 16:53:34 GMT https://vulnogram.org/CVE-2023-31176 https://vulnogram.org/CVE-2023-31176 An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See product Instruction Manual Appendix A dated 20230830… High Network Exploitable Thu, 30 Nov 2023 16:53:11 GMT https://vulnogram.org/CVE-2023-34392 https://vulnogram.org/CVE-2023-34392 A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruct… High Thu, 31 Aug 2023 15:31:57 GMT https://vulnogram.org/CVE-2023-34391 https://vulnogram.org/CVE-2023-34391 Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A [Cybersecurity] tag da… High Thu, 31 Aug 2023 15:31:45 GMT https://vulnogram.org/CVE-2023-31175 https://vulnogram.org/CVE-2023-31175 An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual App… High Thu, 31 Aug 2023 15:31:33 GMT https://vulnogram.org/CVE-2023-31174 https://vulnogram.org/CVE-2023-31174 A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual… High Network Exploitable Thu, 31 Aug 2023 15:31:26 GMT https://vulnogram.org/CVE-2023-31173 https://vulnogram.org/CVE-2023-31173 Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue af… High Thu, 31 Aug 2023 15:30:58 GMT https://vulnogram.org/CVE-2023-31172 https://vulnogram.org/CVE-2023-31172 An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Ins… Medium Thu, 31 Aug 2023 15:30:49 GMT https://vulnogram.org/CVE-2023-31171 https://vulnogram.org/CVE-2023-31171 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be execut… Medium Thu, 31 Aug 2023 15:30:41 GMT https://vulnogram.org/CVE-2023-31170 https://vulnogram.org/CVE-2023-31170 An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device o… Medium Thu, 31 Aug 2023 15:30:32 GMT https://vulnogram.org/CVE-2023-31169 https://vulnogram.org/CVE-2023-31169 An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instru… Medium Thu, 31 Aug 2023 15:30:23 GMT https://vulnogram.org/CVE-2023-31168 https://vulnogram.org/CVE-2023-31168 An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device o… Medium Thu, 31 Aug 2023 15:30:14 GMT https://vulnogram.org/CVE-2023-31167 https://vulnogram.org/CVE-2023-31167 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen… Medium Thu, 31 Aug 2023 15:29:11 GMT https://vulnogram.org/CVE-2023-31166 https://vulnogram.org/CVE-2023-31166 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create… Medium Wed, 10 May 2023 19:25:59 GMT https://vulnogram.org/CVE-2023-31165 https://vulnogram.org/CVE-2023-31165 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:25:34 GMT https://vulnogram.org/CVE-2023-31164 https://vulnogram.org/CVE-2023-31164 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:25:16 GMT https://vulnogram.org/CVE-2023-31163 https://vulnogram.org/CVE-2023-31163 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:24:45 GMT https://vulnogram.org/CVE-2023-31162 https://vulnogram.org/CVE-2023-31162 An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See S… Medium Wed, 10 May 2023 19:24:20 GMT https://vulnogram.org/CVE-2023-31161 https://vulnogram.org/CVE-2023-31161 An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential eff… Medium Wed, 10 May 2023 19:24:03 GMT https://vulnogram.org/CVE-2023-31160 https://vulnogram.org/CVE-2023-31160 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:23:43 GMT https://vulnogram.org/CVE-2023-31159 https://vulnogram.org/CVE-2023-31159 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:23:29 GMT https://vulnogram.org/CVE-2023-31158 https://vulnogram.org/CVE-2023-31158 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:23:15 GMT https://vulnogram.org/CVE-2023-31157 https://vulnogram.org/CVE-2023-31157 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to i… Medium Wed, 10 May 2023 19:22:58 GMT