CVE-2023-31174

Summary

CVE-2023-31174 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator. This issue allows an attacker to inject malicious instructions that could be executed by an authorized device operator. The impacted versions are before 4.5.0.20, and more details can be found in the Instruction Manual Appendices A and E, dated 20230615.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.