PT-2023-2968 · Faronics · Faronics Insight

Published 2023-02-01 · Updated 2025-01-13 · CVE-2023-28352

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Faronics Insight version 10.0.19045

Description The issue is related to insufficient protection of service data in the Enhanced Security mode of the Teacher Console and Student Console of the Faronics Insight platform. Exploitation of this issue may allow a remote attacker to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary code. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled.

Recommendations For Faronics Insight version 10.0.19045, consider disabling the Enhanced Security mode until a patch is available, and restrict access to the UDP broadcast discovery system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Information Disclosure

Weakness Enumeration

CWE-863

CWE-200

Related Identifiers

BDU:2023-02980

CVE-2023-28352

Affected Products

Faronics Insight

References · 6

• 🔥 https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight · Exploit
• https://osv.dev/vulnerability/CVE-2023-28352 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28352 · Security Note
• https://bdu.fstec.ru/vul/2023-02980 · Security Note
• https://t.me/cvenotify/52217 · Telegram Post
• https://research.nccgroup.com/?research=Technical%20advisories · Note