High severity7.3NVD Advisory· Published May 31, 2023· Updated Jun 17, 2026
CVE-2023-28346
CVE-2023-28346
Description
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact with private pages on the web server, enabling them to perform privileged actions such as logging into the console and changing console settings if they have valid credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Faronics/Insight Teacher Consoledescription
Patches
Vulnerability mechanics
References
2- research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/nvdExploitMitigationRelease NotesThird Party Advisory
- research.nccgroup.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.