Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-29410

CVE-2023-29410

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric InsightHome

Default version status: unaffected

  • v1.16 Build 004 to ≤ prioraffected

Schneider Electric InsightFacility

Default version status: unaffected

  • v1.16 Build 004 to ≤ prioraffected

Schneider Electric Conext Gateway

Default version status: unaffected

  • v1.16 Build 004 to ≤ prioraffected

References