Vulnerability Description
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Faronics | Insight | 10.0.19045 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabiliExploitMitigationRelease Notes
- https://research.nccgroup.com/?research=Technical%20advisoriesThird Party Advisory
- https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabiliExploitMitigationRelease Notes
- https://research.nccgroup.com/?research=Technical%20advisoriesThird Party Advisory
FAQ
What is CVE-2023-28344?
CVE-2023-28344 is a vulnerability with a CVSS score of 7.1 (HIGH). An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops a...
How severe is CVE-2023-28344?
CVE-2023-28344 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28344?
Check the references section above for vendor advisories and patch information. Affected products include: Faronics Insight, Microsoft Windows.