2 lines
6.1 KiB
JSON
2 lines
6.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SEL-411L","vendor":"Schweitzer Engineering Laboratories","versions":[{"lessThan":"R118-V4","status":"affected","version":"R118-V0","versionType":"custom"},{"lessThan":"R119-V5","status":"affected","version":"R119-V0","versionType":"custom"},{"lessThan":"R120-V6","status":"affected","version":"R120-V0","versionType":"custom"},{"lessThan":"R121-V3","status":"affected","version":"R121-V0","versionType":"custom"},{"lessThan":"R122-V3","status":"affected","version":"R122-V0","versionType":"custom"},{"lessThan":"R123-V3","status":"affected","version":"R123-V0","versionType":"custom"},{"lessThan":"R124-V3","status":"affected","version":"R124-V0","versionType":"custom"},{"lessThan":"R125-V3","status":"affected","version":"R125-V0","versionType":"custom"},{"lessThan":"R126-V4","status":"affected","version":"R126-V0","versionType":"custom"},{"lessThan":"R127-V2","status":"affected","version":"R127-V0","versionType":"custom"},{"lessThan":"R128-V1","status":"affected","version":"R128-V0","versionType":"custom"},{"lessThan":"R129-V1","status":"affected","version":"R129-V0","versionType":"custom"}]}],"source":"security@selinc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"49894C1C-F351-48C1-9B0C-ADEF9F15967F","versionEndExcluding":"r118-v4","versionStartIncluding":"r118-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D50FA357-FD76-4D6E-BE33-F023EF8EA6D4","versionEndExcluding":"r119-v5","versionStartIncluding":"r119-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F2C5D52B-BE58-41ED-9660-88FCD87EBBBF","versionEndExcluding":"r120-v6","versionStartIncluding":"r120-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"97CF37D0-9DF4-4277-A948-57D0677361DE","versionEndExcluding":"r121-v3","versionStartIncluding":"r121-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5E81C049-DCDA-46D7-A3FD-337663171A4B","versionEndExcluding":"r122-v3","versionStartIncluding":"r122-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6B30BA03-4595-4537-B88A-7DB8D4E565F0","versionEndExcluding":"r123-v3","versionStartIncluding":"r123-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4A5DE8B0-BB5F-49E5-8039-6A7466E3265C","versionEndExcluding":"r124-v3","versionStartIncluding":"r124-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"622B4133-6FDE-49D6-A768-ADFB0AB829A6","versionEndExcluding":"r125-v3","versionStartIncluding":"r125-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B913BE75-D4F1-40C9-9450-C195C84E7EAE","versionEndExcluding":"r126-v4","versionStartIncluding":"r126-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"90C6D8F0-54F0-46CD-994C-524E9593EEE3","versionEndExcluding":"r127-v2","versionStartIncluding":"r127-v0","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:r128-v0:*:*:*:*:*:*:*","matchCriteriaId":"80116398-08C8-4571-B90D-E96530E0A17D","vulnerable":true},{"criteria":"cpe:2.3:o:selinc:sel-411l_firmware:r129-v0:*:*:*:*:*:*:*","matchCriteriaId":"59DB9510-A827-4E5C-B41F-CCB38837BCFB","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:selinc:sel-411l:-:*:*:*:*:*:*:*","matchCriteriaId":"775B0B13-EF38-4AAE-892D-975374673480","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user.\n\n\n\nSee product Instruction Manual Appendix A dated 20230830 for more details.\n"},{"lang":"es","value":"Una restricción inadecuada de las capas o marcos de la interfaz de usuario renderizados en el SEL-411L de Schweitzer Engineering Laboratories podría permitir que un atacante no autenticado realice ataques basados en clickjacking contra un usuario autenticado y autorizado. Consulte el Apéndice A del Manual de instrucciones del producto con fecha 20230830 para obtener más detalles."}],"id":"CVE-2023-2265","lastModified":"2026-06-17T05:52:08.507","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"security@selinc.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-11-30T17:15:07.973","references":[{"source":"security@selinc.com","tags":["Vendor Advisory"],"url":"https://selinc.com/support/security-notifications/external-reports/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://selinc.com/support/security-notifications/external-reports/"}],"sourceIdentifier":"security@selinc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-1021"}],"source":"security@selinc.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-1021"}],"source":"nvd@nist.gov","type":"Primary"}]}
|