PT-2023-2973 · Faronics · Faronics Insight

Published 2023-02-01 · Updated 2025-01-13 · CVE-2023-28348

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Faronics Insight version 10.0.19045

Description The issue allows a suitably positioned attacker to perform a man-in-the-middle attack on either a connected student or teacher. This enables them to intercept student keystrokes or modify executable files being sent from teachers to students. The vulnerability is related to the unencrypted storage of confidential information in the Teacher Console and Student Console components of the Faronics Insight platform. An attacker can exploit this vulnerability by sending specially crafted HTTP requests to port 8890, allowing them to implement a man-in-the-middle attack.

Recommendations For Faronics Insight version 10.0.19045, consider restricting access to the Teacher Console and Student Console components to minimize the risk of exploitation. As a temporary workaround, avoid using the affected port 8890 until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Transmission of Sensitive Information

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-319

CWE-312

Related Identifiers

BDU:2023-02988

CVE-2023-28348

Affected Products

Faronics Insight

References · 5

• 🔥 https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-28348 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28348 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02988 · Security Note
• https://research.nccgroup.com/?research=Technical%20advisories · Note