Is CVE-2023-31167 actively exploited?

No active exploitation of CVE-2023-31167 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-31167 be exploited remotely?

Yes. CVE-2023-31167 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-31167?

CVE-2023-31167 has a CVSS score of 8.1 (HIGH).

HOME VULNERABILITIESCVE-2023-31167

HIGH

CVE-2023-31167

CWE-22Published: August 31, 2023· Updated: Jun 17, 2026

8.1

CVSS v3.1

Official Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal.

SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details.

This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.

NVD Source

Technical Analysis

CVE-2023-31167 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 8.1.