CVE-2023-2310 Channel Accessible by Non-Endpoint

Medium 6.8 Published 10 May 2023 Updated 27 Jan 2025

Remote attackers can perform man-in-the-middle attacks on SEL RTAC devices, potentially causing denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2023-2310?

CVE-2023-2310 is a medium-severity vulnerability in Schweitzer Engineering Laboratories SEL-2241 RTAC module, published on 10 May 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a man-in-the-middle (MiTM) that could result in denial of service.

See the ACSELERATOR RTAC SEL-5033 Software instruction manual date code 20210915 for more details.

Weakness: CWE-300

Which versions are affected by CVE-2023-2310?

It affects 10 products.

Products include Selinc Sel-2241 Rtac Module Firmware, Selinc Sel-3350 Firmware, Selinc Sel-3505-3 Firmware, Selinc Sel-3505 Firmware, Selinc Sel-3530-4 Firmware, Selinc Sel-3530 Firmware and 4 more.

How do I fix CVE-2023-2310?

No fix has been published for CVE-2023-2310 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-2310 being exploited?

There is no known exploitation of CVE-2023-2310 in the wild and no public exploit code.

Sources

Also known as GHSA-72xh-xv88-97qg.