NetSight
IP …
high7.2

CVE-2023-29410

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server…

Impact

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.

Affected products

VendorProductAffected versions
Schneider-ElectricInsighthome Firmware
before 1.16
Version 1.16
Schneider-ElectricInsightfacility Firmware
before 1.16
Version 1.16
Schneider-ElectricConext Gateway Firmware
before 1.16
Version 1.16

Weakness classification

CWE-20

References