An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.
See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.
This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.
Metrics
Affected Vendors & Products
References
History
Sat, 28 Sep 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: SEL
Published: 2023-08-31T15:30:41.030Z
Updated: 2024-09-27T18:48:28.691Z
Reserved: 2023-04-24T23:20:01.609Z
Link: CVE-2023-31171
Vulnrichment
Updated: 2024-08-02T14:45:25.875Z
NVD
Status : Modified
Published: 2023-08-31T16:15:09.403
Modified: 2024-11-21T08:01:33.240
Link: CVE-2023-31171
Redhat
No data.