CVE-2023-28352 - An issue was discovered in Faronics Insight 10.0.19045 on Windows

Back Back to CVE browser

HIGH

An issue was discovered in Faronics Insight 10.0.19045 on Windows

Published May 30, 2023

7.4

HIGH

CVSS 3.1

EPSS 0.69%

Description

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32050
Advisory
https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
ExploitThird Party Advisory
https://research.nccgroup.com/?research=Technical%20advisories
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32050		Advisory
https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/		ExploitThird Party Advisory
https://research.nccgroup.com/?research=Technical%20advisories		Third Party Advisory