CVE-2023-29410

Summary

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.

Affected Software

VendorProductVersion RangeStatus
Schneider ElectricInsightHomev1.16 Build 004 <= prioraffected
Schneider ElectricInsightFacilityv1.16 Build 004 <= prioraffected
Schneider ElectricConext Gatewayv1.16 Build 004 <= prioraffected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References