PT-2023-2970 · Faronics · Faronics Insight

Published 2023-02-01 · Updated 2025-01-13 · CVE-2023-28349

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Faronics Insight version 10.0.19045

Description The issue allows an attacker to create a crafted program mimicking the Teacher Console, which can compel Student Consoles to connect automatically and write arbitrary files to any location on disk with NT AUTHORITY/SYSTEM level permissions. This enables remote code execution. The vulnerability is related to errors in the Teacher Console component of the Faronics Insight platform, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Faronics Insight version 10.0.19045, consider disabling the Teacher Console functionality until a patch is available to prevent potential exploitation. Restrict access to the Student Consoles to minimize the risk of automatic connection to maliciously crafted Teacher Console programs. Avoid using the affected version of Faronics Insight for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Origin Validation Error

Weakness Enumeration

CWE-698

CWE-346

Related Identifiers

BDU:2023-02982

CVE-2023-28349

Affected Products

Faronics Insight

References · 5

• 🔥 https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight · Exploit
• https://bdu.fstec.ru/vul/2023-02982 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28349 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28349 · Vendor Advisory
• https://research.nccgroup.com/?research=Technical%20advisories · Note