CVE-2023-2265 - CVE House
Back to Database
Status published Medium CVE-2023-2265

Improper restriction of rendered UI layers or frames could lead to clickjacking attack

Vulnerability Description

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-2265

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Sushant Mane, Parul Sindhwad, Imran Jamadar & Dr. Faruk Kazi from CoE-CNDS Lab, VJTI, Mumbai, India.

References

More from Schweitzer Engineering Laboratories

View All →
CVE-2025-48018
Deserialization of Untrusted Data
High 7.5
CVE-2025-48017
Improper Limitation of a Pathname to a Restricted Directory
Critical 9
CVE-2025-48016
Improper Control of Interaction Frequency
Medium 4.3
CVE-2025-48015
Observable Response Discrepancy
Low 3.7
CVE-2025-48014
Improper Restriction of Excessive Authentication Attempts
High 7.5

Affected Vendor

Schweitzer Engineering Laboratories

View all reports →

Affected Software

SEL-411L
Vulnerable Versions:
R118-V0, R119-V0, R120-V0, R121-V0, R122-V0, R123-V0, R124-V0, R125-V0, R126-V0, R127-V0, R128-V0, R129-V0

Timeline

Official Publish: November 30th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-1021

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.