Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-30	CVE-2023-2265	Improper Restriction of Rendered UI Layers or Frames vulnerability in Selinc Sel-411L Firmware An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details. network low complexity selinc CWE-1021	6.1
2023-11-30	CVE-2023-2266	Cross-site Scripting vulnerability in Selinc Sel-411L Firmware An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details. network low complexity selinc CWE-79	6.1
2023-11-30	CVE-2023-2267	Unspecified vulnerability in Selinc Sel-411L Firmware An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details. network low complexity selinc	5.4