1. Home
  2. CVE Database
  3. CVE-2023-34391
HIGH · 7.4

CVE-2023-34391

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See I...

Vulnerability Description

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details. This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000.

CVSS Score

7.4

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
SelincSel-5033 Acselerator Real-Time Automation Controller< 1.35.151.21000
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-277CWE-732

References

FAQ

What is CVE-2023-34391?

CVE-2023-34391 is a vulnerability with a CVSS score of 7.4 (HIGH). Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See I...

How severe is CVE-2023-34391?

CVE-2023-34391 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-34391?

Check the references section above for vendor advisories and patch information. Affected products include: Selinc Sel-5033 Acselerator Real-Time Automation Controller, Microsoft Windows.