Vulnerability Description
An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in-the-middle attack on either a connected student or teacher, enabling them to intercept student keystrokes or modify executable files being sent from teachers to students.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Faronics | Insight | 10.0.19045 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabiliExploitMitigationRelease Notes
- https://research.nccgroup.com/?research=Technical%20advisoriesThird Party Advisory
- https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabiliExploitMitigationRelease Notes
- https://research.nccgroup.com/?research=Technical%20advisoriesThird Party Advisory
FAQ
What is CVE-2023-28348?
CVE-2023-28348 is a vulnerability with a CVSS score of 7.4 (HIGH). An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in-the-middle attack on either a connected student or teacher, enabling them to in...
How severe is CVE-2023-28348?
CVE-2023-28348 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28348?
Check the references section above for vendor advisories and patch information. Affected products include: Faronics Insight, Microsoft Windows.