CVE-2024-2103
Inclusion of Undocumented Features
- Published
- Updated
- Reserved
- Assigned by
- SEL
Description
Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G Generator Protection Relay, SEL-710-5 Motor Protection Relay, SEL-751 Feeder Protection Relay, SEL-787-2/-3/-4 Transformer Protection Relay, SEL-787Z High-Impedance Differential Relay . See product instruction manual appendix A dated 20240308 for more details regarding the SEL-751 Feeder Protection Relay. For more information for the other affected products, see their instruction manuals dated 20240329.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| SELCNA (assigner) | 3.1 | Medium6.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H |
| NVDNVD · Deferred | 3.1 | Medium6.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.46% · top 60% of all CVEs (5 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.
Weakness
Affected products
Schweitzer Engineering Laboratories · SEL-700BT Motor Bus Transfer Relay
- affected R301-V0 – < R301-V6
- affected R302-V0 – < R302-V1
Schweitzer Engineering Laboratories · SEL-700G Generator Protection Relay
- affected R100-V0 – < R301-V6
- affected R302-V0 – < R302-V1
SEL-710-5 Motor Protection Relay · SEL-710-5 Motor Protection Relay
- affected R100-V0 – < R302-V1
Schweitzer Engineering Laboratories · SEL-751 Feeder Protection Relay
- affected R101-V0 – < R302-V3
- affected R400-V0 – < R400-V2
Schweitzer Engineering Laboratories · SEL-787-2/-3/-4 Transformer Protection Relay
- affected R100-V0 – < R302-V1
Schweitzer Engineering Laboratories · SEL-787Z High-Impedance Differential Relay
- affected R302-V0 – < R302-V3
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-2103)Record last updated .