Successful exploitation of this remotely exploitable vulnerability, which ended up reported by a researcher who wished to remain anonymous, could allow an attacker to make modifications or cause a denial-of-service condition.
In the issue, the inclusion of undocumented features vulnerability is accessible when logged on with a privileged access level on the Schweitzer Engineering Laboratories relays which could allow the relay to behave unpredictably.
CVE-2024-2103 is the case number for this vulnerability, which has a CVSS v3.1 base score of 6.5. There is also a CVSS v4 base score of 5.9.
The following Schweitzer Engineering Laboratories products suffer from the issue:
- SEL-700BT Motor Bus Transfer Relay: R301-V0 up to but not including R301-V6
- SEL-700BT Motor Bus Transfer Relay: R302-V0 up to but not including R302-V1
- SEL-700G Generator Protection Relay: R100-V0 up to but not including R301-V6
- SEL-700G Generator Protection Relay: R302-V0 up to but not including R302-V1
- SEL-710-5 Motor Protection Relay: R100-V0 up to but not including R302-V1
- SEL-751 Feeder Protection Relay: R101-V0 up to but not including R302-V3
- SEL-751 Feeder Protection Relay: R400-V0 up to but not including R400-V2
- SEL-787-2/-3/-4 Transformer Protection Relay: R100-V0 up to but not including R302-V1
- SEL-787Z High-Impedance Differential Relay: R302-V0 up to but not including R302-V3
The product sees use mainly in the energy sector, and on a global basis.
No known public exploits target this vulnerability. However, an attacker could leverage this low complexity vulnerability.
Schweitzer Engineering Laboratories recommends updating to the latest versions:
- SEL-700BT Motor Bus Transfer Relay: R301-V6
- SEL-700BT Motor Bus Transfer Relay: R302-V1Â
- SEL-700G Generator Protection Relay: R301-V6Â
- SEL-700G Generator Protection Relay: R302-V1
- SEL-710-5 Motor Protection Relay: R302-V0
- SEL-751 Feeder Protection Relay: R302-V3
- SEL-751 Feeder Protection Relay: R400-V2
- SEL-787-2/-3/-4 Transformer Protection Relay: R302-V1
- SEL-787Z High-Impedance Differential Relay: R302-V3