high7.4
CVE-2023-28352
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
Impact
An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Faronics | Insight | Version 10.0.19045 |
Weakness classification
References
- NVD record
- CVE.org record
- https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
- https://research.nccgroup.com/?research=Technical%20advisories
- https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
- https://research.nccgroup.com/?research=Technical%20advisories