CVE-2023-34391

Summary

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths.

See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details.

This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000.

Affected Software

VendorProductVersion RangeStatus
Schweitzer Engineering LaboratoriesSEL-5033 AcSELerator RTAC Software0 < 1.35.151.21000affected

Weaknesses

  • CWE-277: CWE-277: Insecure Inherited Permissions

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References