Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.
CVSS Information
N/A
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
SEL AcSELerator Architect 安全漏洞
Vulnerability Description
SEL AcSELerator Architect是美国Schweitzer Engineering Laboratories(SEL)公司的一套用于与变电站进行通信并对其进行配置、管理的系统。 SEL AcSELerator Architect 2.2.24.0及之前版本中存在安全漏洞,该漏洞源于程序允许未过滤的输入传入到XML解析器中。攻击者可利用该漏洞泄露或检索任意数据,执行任意代码(在特定平台的某些情况下)并造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A