CVE-2024-2103 Inclusion of Undocumented Features
Undocumented features in SEL relays may cause unpredictable behavior when accessed by privileged users, requiring attention from industrial control system operators.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-2103?
CVE-2024-2103 is a medium-severity vulnerability in SEL-710-5 Motor Protection Relay SEL-700G Generator Protection Relay, published on 4 Apr 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G Generator Protection Relay, SEL-710-5 Motor Protection Relay, SEL-751 Feeder Protection Relay, SEL-787-2/-3/-4 Transformer Protection Relay, SEL-787Z High-Impedance Differential Relay
. See product instruction manual appendix A dated 20240308 for more details regarding the SEL-751 Feeder Protection Relay. For more information for the other affected products, see their instruction manuals dated 20240329.
Weakness: CWE-1242
Which versions are affected by CVE-2024-2103?
How do I fix CVE-2024-2103?
No fix has been published for CVE-2024-2103 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-2103 being exploited?
There is no known exploitation of CVE-2024-2103 in the wild and no public exploit code.
Sources
Also known as GHSA-r596-ggc2-8m6g.