Vulnerability · Published Apr 4, 2024 · Assigned by SEL
CVE-2024-2103Inclusion of Undocumented Features
Medium 6.5
In plain English
A medium-severity security flaw in SEL-700BT Motor Bus Transfer Relay from Schweitzer Engineering Laboratories. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Official description
Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G Generator Protection Relay, SEL-710-5 Motor Protection Relay, SEL-751 Feeder Protection Relay, SEL-787-2/-3/-4 Transformer Protection Relay, SEL-787Z High-Impedance Differential Relay . See product instruction manual appendix A dated 20240308 for more details regarding the SEL-751 Feeder Protection Relay. For more information for the other affected products, see their instruction manuals dated 20240329.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schweitzer Engineering Laboratories | SEL-700BT Motor Bus Transfer Relay | R301-V0 – before R301-V6R302-V0 – before R302-V1 |
| Schweitzer Engineering Laboratories | SEL-700G Generator Protection Relay | R100-V0 – before R301-V6R302-V0 – before R302-V1 |
| SEL-710-5 Motor Protection Relay | SEL-710-5 Motor Protection Relay | R100-V0 – before R302-V1 |
| Schweitzer Engineering Laboratories | SEL-751 Feeder Protection Relay | R101-V0 – before R302-V3R400-V0 – before R400-V2 |
| Schweitzer Engineering Laboratories | SEL-787-2/-3/-4 Transformer Protection Relay | R100-V0 – before R302-V1 |
| Schweitzer Engineering Laboratories | SEL-787Z High-Impedance Differential Relay | R302-V0 – before R302-V3 |
Weakness: CWE-1242 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H