PT-2023-2975 · Faronics · Faronics Insight

Published 2023-02-01 · Updated 2025-01-13 · CVE-2023-28353

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Faronics Insight version 10.0.19045

Description An issue in Faronics Insight allows an unauthenticated attacker to upload any type of file to any location on the Teacher Console's computer. This enables various exploitation paths, including code execution. It is also possible for the attacker to chain this issue with others, causing a deployed DLL file to immediately execute as NT AUTHORITY/SYSTEM. The vulnerability is related to insufficient access restriction, allowing an attacker to upload dangerous file types and potentially gain elevated privileges and execute arbitrary code.

Recommendations For Faronics Insight version 10.0.19045, consider restricting access to the file upload functionality in the Teacher Console until a patch is available. As a temporary workaround, disabling the ability to upload files to sensitive locations on the Teacher Console's computer may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-264

CWE-434

Related Identifiers

BDU:2023-02990

CVE-2023-28353

Affected Products

Faronics Insight

References · 5

• 🔥 https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-28353 · Security Note
• https://bdu.fstec.ru/vul/2023-02990 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28353 · Vendor Advisory
• https://research.nccgroup.com/?research=Technical%20advisories · Note