CVE-2023-31173

HIGH

SEL-5037 SEL Grid Configurator <4.5.0.20 - Auth Bypass

Title source: llm

Description

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

References (2)

Core 2

Core References

Vendor Advisory

https://selinc.com/support/security-notifications/external-reports/

Not Applicable

https://www.nozominetworks.com/blog/

Scores

CVSS v3 7.7

EPSS 0.0020

EPSS Percentile 9.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-798

Status published

Products (1)

selinc/sel-5037_sel_grid_configurator < 4.5.0.20

Published Aug 31, 2023

Tracked Since Feb 18, 2026