CVE-2017-7928
CriticalSummary
An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202, R203, R203-V1, R203-V2, R204, and R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.
Risk Assessment
Improper access control may lead to unauthorized access to critical network resources, posing a significant security threat to the organization.
Recommendation
It is recommended to update the devices to the latest software version to address the access control issue and review the NAT port forwarding configuration to ensure proper security.
Original NVD description (English source)
An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.