Vulnerabilities > Selinc > SEL 411L Firmware > r126.v0

DATE CVE VULNERABILITY TITLE RISK
2023-11-30 CVE-2023-2264 Unspecified vulnerability in Selinc Sel-411L Firmware
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details.
local
low complexity
selinc
7.8
2023-11-30 CVE-2023-2265 Improper Restriction of Rendered UI Layers or Frames vulnerability in Selinc Sel-411L Firmware
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details.
network
low complexity
selinc CWE-1021
6.1
2023-11-30 CVE-2023-2266 Cross-site Scripting vulnerability in Selinc Sel-411L Firmware
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.
network
low complexity
selinc CWE-79
6.1
2023-11-30 CVE-2023-2267 Unspecified vulnerability in Selinc Sel-411L Firmware
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.
network
low complexity
selinc
5.4