Critical severity9.6NVD Advisory· Published May 31, 2023· Updated Jun 17, 2026
CVE-2023-28347
CVE-2023-28347
Description
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly to a Student Console, providing unauthenticated attackers with the ability to exploit XSS vulnerabilities within the Teacher Console application and achieve remote code execution as NT AUTHORITY/SYSTEM on all connected Student Consoles and the Teacher Console in a Zero Click manner.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/nvdExploitMitigationRelease NotesThird Party Advisory
- research.nccgroup.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.