1. Home
  2. CVE Database
  3. CVE-2023-2310
MEDIUM · 6.8

CVE-2023-2310

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (M...

Vulnerability Description

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service. See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SelincSel-2241 Rtac Module Firmware>= r113-v0, < r150-v2
SelincSel-2241 Rtac Module-
SelincSel-3350 Firmware>= r148-v0, < r150-v2
SelincSel-3350-
SelincSel-3505 Firmware>= r119-v0, < r150-v2
SelincSel-3505-
SelincSel-3505-3 Firmware>= r132-v0, < r150-v2
SelincSel-3505-3-
SelincSel-3530 Firmware>= r100-v0, < r150-v2
SelincSel-3530-
SelincSel-3530-4 Firmware>= r108-v0, < r150-v2
SelincSel-3530-4-
SelincSel-3532 Firmware>= r132-v0, < r150-v2
SelincSel-3532-
SelincSel-3555 Firmware>= r134-v0, < r150-v2
SelincSel-3555-
SelincSel-3560E Firmware>= r144-v2, < r150-v2
SelincSel-3560E-
SelincSel-3560S Firmware>= r144-v2, < r150-v2
SelincSel-3560S-

Related Weaknesses (CWE)

CWE-300

References

FAQ

What is CVE-2023-2310?

CVE-2023-2310 is a vulnerability with a CVSS score of 6.8 (MEDIUM). A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (M...

How severe is CVE-2023-2310?

CVE-2023-2310 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-2310?

Check the references section above for vendor advisories and patch information. Affected products include: Selinc Sel-2241 Rtac Module Firmware, Selinc Sel-2241 Rtac Module, Selinc Sel-3350 Firmware, Selinc Sel-3350, Selinc Sel-3505 Firmware.