CVE-2023-31167: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-31 · updated 2026-06-17
Weakness: CWE-22

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details. This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.

Affected products

Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778 — fixed in 1.0.49152.778

How to fix

Upgrade to a fixed version: Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software 1.0.49152.778. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-31167 or the next vulnerability affects your stack