漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Missing Authentication for Critical Function
Vulnerability Description
A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 访问控制错误漏洞
Vulnerability Description
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator是美国Schweitzer Engineering Laboratories公司的一款免费分发的软件工具————网格配置器,可供工程师和技术人员快速创建、管理和部署 SEL 电力系统设备的设置。 Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 存在安全漏洞,该漏洞源于关键功能缺失身份验证。
CVSS Information
N/A
Vulnerability Type
N/A