目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Schweitzer Engineering Laboratories 厂商漏洞列表 / CVE 中文分析 60

Schweitzer Engineering Laboratories 厂商相关 60 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Schweitzer Engineering Laboratories 专注于电力保护、自动化及继电保护设备的研发，其工业控制系统软件已收录 60 条 CVE。历史漏洞多涉及远程代码执行、身份验证绕过及缓冲区溢出，常因固件更新机制缺陷或默认配置不当引发。作为关键基础设施供应商，其设备广泛部署于电网，安全事件可能影响能源稳定性。厂商持续通过固件补丁修复高危缺陷，但鉴于系统复杂性，配置错误仍是主要风险点，需严格实施网络隔离与访问控制。

上位製品 Schweitzer Engineering Laboratories: SEL-3505 SEL Blueframe OS SEL-5030 acSELerator QuickSet Software SEL-451 SEL-5037 SEL Grid Configurator SEL-411L SEL-5056 Software-Defined Network Flow Controller SEL-5033 AcSELerator RTAC Software SEL-3532 SEL-5036 acSELerator Bay Screen Builder Software SEL-700BT Motor Bus Transfer Relay SEL-5037 Grid Configurator SEL-3350-1
CVE IDタイトルCVSS深刻度公開日
CVE-2025-48018 Deserialization of Untrusted Data — SEL-5030 acSELerator QuickSet SoftwareCWE-502 7.5 High2025-05-20
CVE-2025-48017 Improper Limitation of a Pathname to a Restricted Directory — SEL-5056 Software-Defined Network Flow ControllerCWE-22 9.0 Critical2025-05-20
CVE-2025-48016 Improper Control of Interaction Frequency — SEL-5056 Software-Defined Network Flow ControllerCWE-799 4.3 Medium2025-05-20
CVE-2025-48015 Observable Response Discrepancy — SEL-5056 Software-Defined Network Flow ControllerCWE-204 3.7 Low2025-05-20
CVE-2025-48014 Improper Restriction of Excessive Authentication Attempts — SEL-5056 Software-Defined Network Flow ControllerCWE-307 7.5 High2025-05-20
CVE-2025-46743 Cross-Site Request Forgery — SEL Blueframe OSCWE-352 6.3 Medium2025-05-12
CVE-2025-46750 Authentication Bypass — SEL-3350-1CWE-305 4.4 Medium2025-05-12
CVE-2025-46749 Improper Neutralization of Input — SEL Blueframe OSCWE-79 4.3 Medium2025-05-12
CVE-2025-46748 Unverified Password Change — SEL Blueframe OSCWE-620 2.7 Low2025-05-12
CVE-2025-46747 Exposure of Sensitive System Information — SEL Blueframe OSCWE-497 5.7 Medium2025-05-12
CVE-2025-46746 Error Message Contains Sensitive Information — SEL Blueframe OSCWE-209 5.8 Medium2025-05-12
CVE-2025-46745 Improper Privilege Management — SEL Blueframe OSCWE-862 6.5 Medium2025-05-12
CVE-2025-46744 Improper Privilege Management — SEL Blueframe OSCWE-863 2.7 Low2025-05-12
CVE-2025-46742 Improper Access Control — SEL Blueframe OSCWE-521 4.3 Medium2025-05-12
CVE-2025-46741 Improper Privilege Management — SEL Blueframe OSCWE-613 5.7 Medium2025-05-12
CVE-2025-46740 Improper Handling of Insufficient Permissions — SEL Blueframe OSCWE-280 7.5 High2025-05-12
CVE-2025-46739 Improper Restriction of Excessive Authentication Attempts — SEL Blueframe OSCWE-307 8.1 High2025-05-12
CVE-2025-46738 Deserialization of Untrusted Data — SEL-5033 acSELerator RTAC SoftwareCWE-502 6.6 Medium2025-05-12
CVE-2025-46737 Origin Validation Error — SEL-5037 Grid ConfiguratorCWE-346 7.4 High2025-05-12
CVE-2024-2103 Inclusion of Undocumented Features — SEL-700BT Motor Bus Transfer RelayCWE-1242 6.5 Medium2024-04-04
CVE-2023-2267 Improper input validation could lead to reflection injection attacks — SEL-411LCWE-20 4.3 Medium2023-11-30
CVE-2023-2266 Improper neutralization of input during web page generation could lead to cross-site scripting based attacks — SEL-411LCWE-79 4.3 Medium2023-11-30
CVE-2023-2265 Improper restriction of rendered UI layers or frames could lead to clickjacking attack — SEL-411LCWE-1021 4.3 Medium2023-11-30
CVE-2023-2264 Improper input validition could lead to code injection — SEL-411LCWE-20 4.0 Medium2023-11-30
CVE-2023-34390 Improper input validation could lead to denial of service — SEL-451CWE-20 4.5 Medium2023-11-30
CVE-2023-34389 Allocation of resources without limits could lead to denial of service — SEL-451CWE-770 4.5 Medium2023-11-30
CVE-2023-34388 Improper authentication could lead to session hijacking — SEL-451CWE-287 6.5 Medium2023-11-30
CVE-2023-31177 Improper neutralizataion of input could lead to execution of arbitrary code — SEL-451CWE-79 4.3 Medium2023-11-30
CVE-2023-31176 Insufficient entropy vulnerability could lead to authentication bypass — SEL-451CWE-331 7.5 High2023-11-30
CVE-2023-34392 Missing Authentication for Critical Function — SEL-5037 SEL Grid ConfiguratorCWE-306 8.2 High2023-08-31

本页汇总了 Schweitzer Engineering Laboratories 厂商截至目前公开的全部 60 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。