What’s Vulnerable › Vulnerabilities

CVE-2024-2103: Inclusion of Undocumented Features

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-04 · updated 2026-06-17
• Weakness: CWE-1242

Description

Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G Generator Protection Relay, SEL-710-5 Motor Protection Relay, SEL-751 Feeder Protection Relay, SEL-787-2/-3/-4 Transformer Protection Relay, SEL-787Z High-Impedance Differential Relay . See product instruction manual appendix A dated 20240308 for more details regarding the SEL-751 Feeder Protection Relay. For more information for the other affected products, see their instruction manuals dated 20240329.

Affected products

• SEL-710-5 Motor Protection Relay: from R100-V0 before R302-V1 — fixed in R302-V1
• Schweitzer Engineering Laboratories SEL-700BT Motor Bus Transfer Relay: from R301-V0 before R301-V6; from R302-V0 before R302-V1 — fixed in R301-V6, R302-V1
• Schweitzer Engineering Laboratories SEL-700G Generator Protection Relay: from R100-V0 before R301-V6; from R302-V0 before R302-V1 — fixed in R301-V6, R302-V1
• Schweitzer Engineering Laboratories SEL-751 Feeder Protection Relay: from R101-V0 before R302-V3; from R400-V0 before R400-V2 — fixed in R302-V3, R400-V2
• Schweitzer Engineering Laboratories SEL-787-2/-3/-4 Transformer Protection Relay: from R100-V0 before R302-V1 — fixed in R302-V1
• Schweitzer Engineering Laboratories SEL-787Z High-Impedance Differential Relay: from R302-V0 before R302-V3 — fixed in R302-V3

How to fix

Upgrade to a fixed version: SEL-710-5 Motor Protection Relay R302-V1; Schweitzer Engineering Laboratories SEL-700BT Motor Bus Transfer Relay R301-V6, R302-V1; Schweitzer Engineering Laboratories SEL-700G Generator Protection Relay R301-V6, R302-V1; Schweitzer Engineering Laboratories SEL-751 Feeder Protection Relay R302-V3, R400-V2; Schweitzer Engineering Laboratories SEL-787-2/-3/-4 Transformer Protection Relay R302-V1; Schweitzer Engineering Laboratories SEL-787Z High-Impedance Differential Relay R302-V3. Check the vendor advisory for mitigations.

References

• https://selinc.com/support/security-notifications/external-reports/
• https://selinc.com/support/security-notifications/external-reports/

Get alerted when CVE-2024-2103 or the next vulnerability affects your stack