CVE-2023-28344

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28344
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console.

7.1 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://research.nccgroup.com/?research=Technical%20advisories Third Party Advisory
https://research.nccgroup.com/?research=Technical%20advisories Third Party Advisory
https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/ Exploit Mitigation Release Notes Third Party Advisory
https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/ Exploit Mitigation Release Notes Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:faronics:insight:10.0.19045:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

14 Jan 2025, 17:15

Type Values Removed Values Added
References (MISC) https://research.nccgroup.com/?research=Technical%20advisories - Third Party Advisory () https://research.nccgroup.com/?research=Technical%20advisories - Third Party Advisory
References (MISC) https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/ - Exploit, Mitigation, Release Notes, Third Party Advisory () https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/ - Exploit, Mitigation, Release Notes, Third Party Advisory

06 Jun 2023, 18:18

Type Values Removed Values Added
First Time Faronics insight
Microsoft
Microsoft windows
Faronics
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:faronics:insight:10.0.19045:*:*:*:*:*:*:*
CWE CWE-668
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
References (MISC) https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/ - (MISC) https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/ - Exploit, Mitigation, Release Notes, Third Party Advisory
References (MISC) https://research.nccgroup.com/?research=Technical%20advisories - (MISC) https://research.nccgroup.com/?research=Technical%20advisories - Third Party Advisory

31 May 2023, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-31 00:15

Updated : 2025-01-14 17:15

NVD link : CVE-2023-28344

Mitre link : CVE-2023-28344

JSON object : View

Products Affected

faronics

  • insight

microsoft

  • windows
CWE
CWE-668

Exposure of Resource to Wrong Sphere