CVE-2025-46737— Origin Validation Error
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-46737
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Origin Validation Error
Source: NVD (National Vulnerability Database)
Vulnerability Description
SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
源验证错误
Source: NVD (National Vulnerability Database)
Vulnerability Title
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator是美国Schweitzer Engineering Laboratories公司的一款免费分发的软件工具————网格配置器，可供工程师和技术人员快速创建、管理和部署 SEL 电力系统设备的设置。 Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator存在安全漏洞，该漏洞源于数据网关服务存在过度宽松的
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Schweitzer Engineering Laboratories | SEL-5037 Grid Configurator | 0 ~ 6.4.0.58 | - |
II. Public POCs for CVE-2025-46737
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-46737
请登录查看更多情报信息。
Same Patch Batch · Schweitzer Engineering Laboratories · 2025-05-12 · 14 CVEs total
| CVE-2025-46739 | 8.1 HIGH | Improper Restriction of Excessive Authentication Attempts |
| CVE-2025-46740 | 7.5 HIGH | Improper Handling of Insufficient Permissions |
| CVE-2025-46738 | 6.6 MEDIUM | Deserialization of Untrusted Data |
| CVE-2025-46745 | 6.5 MEDIUM | Improper Privilege Management |
| CVE-2025-46743 | 6.3 MEDIUM | Cross-Site Request Forgery |
| CVE-2025-46746 | 5.8 MEDIUM | Error Message Contains Sensitive Information |
| CVE-2025-46747 | 5.7 MEDIUM | Exposure of Sensitive System Information |
| CVE-2025-46741 | 5.7 MEDIUM | Improper Privilege Management |
| CVE-2025-46750 | 4.4 MEDIUM | Authentication Bypass |
| CVE-2025-46742 | 4.3 MEDIUM | Improper Access Control |
| CVE-2025-46749 | 4.3 MEDIUM | Improper Neutralization of Input |
| CVE-2025-46744 | 2.7 LOW | Improper Privilege Management |
| CVE-2025-46748 | 2.7 LOW | Unverified Password Change |
IV. Related Vulnerabilities
Same vendor: Schweitzer Engineering Laboratories
Same weakness: CWE-346
- CVE-2026-6508
RCE in TUBITAK BILGEM's Liderahenk - CVE-2026-43870
Apache Thrift: Node.js web_server.js multi-vulnerability - CVE-2026-7439
AgentFlow Local Web API Content-Type Validation Bypass - CVE-2026-41398
OpenClaw - Unauthorized Agent Request Dispatch via Untrusted - CVE-2026-41393
OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance an
V. Comments for CVE-2025-46737
No comments yet