SARA / Free Tools / CVE / CVE-2023-2310

CVE-2023-2310 — A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.

CVSS
6.8 MEDIUM
EPSS
0.76% (top 26.90%)
CWE
CWE-300
Published
2023-05-10T19:18:43.806Z
Last modified
2025-01-27T18:20:35.192Z
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

01What is this vulnerability?

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.

02Affected products

VendorProductVersions
Schweitzer Engineering LaboratoriesSEL3505 — R119-V0, R119-V0, R119-V0, R119-V0
Schweitzer Engineering Laboratories, Inc.SEL3505-3 — R132-V0, R132-V0, R132-V0, R132-V0
Schweitzer Engineering LaboratoriesSEL3530 — R100-V0, R100-V0, R100-V0, R100-V0
Schweitzer Engineering Laboratories, Inc.SEL3530-4 — R108-V0, R108-V0, R108-V0, R108-V0
Schweitzer Engineering Laboratories, Inc.SEL3532 — R132-V0, R132-V0, R132-V0, R132-V0
Schweitzer Engineering Laboratories, Inc.SEL3555 — R134-V0, R134-V0, R134-V0, R134-V0
Schweitzer Engineering Laboratories, Inc.SEL3560S — R144-V2, R144-V2, R144-V2, R144-V2
Schweitzer Engineering Laboratories, Inc.SEL3560E — R144-V2, R144-V2, R144-V2, R144-V2
Schweitzer Engineering Laboratories, Inc.SEL2241 RTAC module — R113-V0, R113-V0, R113-V0, R113-V0
Schweitzer Engineering Laboratories, Inc.SEL3350 — R148-V0, R148-V0, R148-V0

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →