Vulnerability · Published Aug 31, 2023 · Assigned by SEL
CVE-2023-31167Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Medium 5.0
In plain English
A medium-severity path traversal in SEL-5036 acSELerator Bay Screen Builder Software from Schweitzer Engineering Laboratories. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Official description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details. This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schweitzer Engineering Laboratories | SEL-5036 acSELerator Bay Screen Builder Software | 0 – before 1.0.49152.778 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N