CVE:CVE-2023-31152
CNNVD:CNNVD-202305-994
Schweitzer Engineering Laboratories Real Time Automation Controller（SEL RTAC）是美国Schweitzer Engineering Laboratories公司的一个功能强大的多功能自动化平台。
Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC)存在安全漏洞，该漏洞源于Web 界面中的存在不当输入验证，远程攻击者利用该漏洞可以执行任意代码。
solution:Upgrade selinc sel-2241_rtac_module_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3350_firmware to a higher version than r150-v2,and avoid the version [r148-v0,r150-v2); Upgrade selinc sel-3505_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3505-3_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3530_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3530-4_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3532_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3555_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3560e_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2); Upgrade selinc sel-3560s_firmware to a higher version than r150-v2,and avoid the version [r147-v0,r150-v2)