title:  Improper input validation could lead to denial of service
description: An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services.
See product Instruction Manual Appendix A dated 20230830 for more details.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: SEL-451
vendor: Schweitzer Engineering Laboratories
versions:
lessThan: R315-V4, status: affected, version: R315-V0, versionType: custom
lessThan: R316-V4, status: affected, version: R316-V0, versionType: custom
lessThan: R317-V4, status: affected, version: R317-V0, versionType: custom
lessThan: R318-V5, status: affected, version: R318-V0, versionType: custom
lessThan: R320-V3, status: affected, version: R320-V0, versionType: custom
lessThan: R321-V3, status: affected, version: R321-V0, versionType: custom
lessThan: R322-V3, status: affected, version: R322-V0, versionType: custom
lessThan: R323-V5, status: affected, version: R323-V0, versionType: custom
lessThan: R324-V4, status: affected, version: R324-V0, versionType: custom
lessThan: R325-V3, status: affected, version: R325-V0, versionType: custom
lessThan: R326-V1, status: affected, version: R326-V0, versionType: custom
lessThan: R327-V1, status: affected, version: R327-V0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL