Improper Input Validation in Web Interface

A flaw in the SEL RTAC web interface fails to properly validate user input, allowing an authenticated attacker to modify configuration files without proper authorization. This could lead to unauthorized changes to critical system settings.

Improper input validation in the RTAC web interface permits a remote authenticated attacker to bypass input sanitization controls and arbitrarily modify configuration files. The vulnerability requires prior authentication and affects the integrity of system configurations, potentially enabling unauthorized reconfiguration of industrial control settings.