An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.
See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.
This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: SEL
Published: 2023-08-31T15:30:41.030Z
Updated: 2024-08-02T14:45:25.875Z
Reserved: 2023-04-24T23:20:01.609Z
Link: CVE-2023-31171
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-31T16:15:09.403
Modified: 2023-09-05T16:33:35.107
Link: CVE-2023-31171
Redhat
No data.