CVE Database
/

CVE-2024-2103

Back to search

CVE-2024-2103

Published: Apr 4, 2024

Modified: Aug 1, 2024

PUBLISHED

CVSS v3.1

6.5

MEDIUM

Description

Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G Generator Protection Relay, SEL-710-5 Motor Protection Relay, SEL-751 Feeder Protection Relay, SEL-787-2/-3/-4 Transformer Protection Relay, SEL-787Z High-Impedance Differential Relay . See product instruction manual appendix A dated 20240308 for more details regarding the SEL-751 Feeder Protection Relay. For more information for the other affected products, see their instruction manuals dated 20240329.

VendorProductVersions

Schweitzer Engineering Laboratories

SEL-700BT Motor Bus Transfer Relay

affected
R301-V0 - < R301-V6
affected
R302-V0 - < R302-V1

Schweitzer Engineering Laboratories

SEL-700G Generator Protection Relay

affected
R100-V0 - < R301-V6
affected
R302-V0 - < R302-V1

SEL-710-5 Motor Protection Relay

SEL-710-5 Motor Protection Relay

affected
R100-V0 - < R302-V1

Schweitzer Engineering Laboratories

SEL-751 Feeder Protection Relay

affected
R101-V0 - < R302-V3
affected
R400-V0 - < R400-V2

Schweitzer Engineering Laboratories

SEL-787-2/-3/-4 Transformer Protection Relay

affected
R100-V0 - < R302-V1

Schweitzer Engineering Laboratories

SEL-787Z High-Impedance Differential Relay

affected
R302-V0 - < R302-V3

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now