An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system.

See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.

This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-31175
• https://selinc.com/support/security-notifications/external-reports
• https://www.nozominetworks.com/blog