Vulnerability · Published Aug 31, 2023 · Assigned by SEL
CVE-2023-31173Use of Hard-coded Credentials
High 7.7
In plain English
A high-severity hard-coded credentials in SEL-5037 SEL Grid Configurator from Schweitzer Engineering Laboratories. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.2%top 88.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schweitzer Engineering Laboratories | SEL-5037 SEL Grid Configurator | 0 – before 4.5.0.20 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N