VYPR
← All advisories
High severity7.2NVD Advisory· Published Apr 18, 2023· Updated Jun 17, 2026

CVE-2023-29410

CVE-2023-29410

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.

Affected products

13
  • Schneider Electric/Conext Gateway Firmware3 versions
    cpe:2.3:o:schneider-electric:conext_gateway_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:schneider-electric:conext_gateway_firmware:*:*:*:*:*:*:*:*range: <1.16
    • cpe:2.3:o:schneider-electric:conext_gateway_firmware:1.16:-:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:conext_gateway_firmware:1.16:build_004:*:*:*:*:*:*
  • Schneider Electric/Insightfacility Firmware3 versions
    cpe:2.3:o:schneider-electric:insightfacility_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:schneider-electric:insightfacility_firmware:*:*:*:*:*:*:*:*range: <1.16
    • cpe:2.3:o:schneider-electric:insightfacility_firmware:1.16:-:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:insightfacility_firmware:1.16:build_004:*:*:*:*:*:*
  • Schneider Electric/Insighthome Firmware3 versions
    cpe:2.3:o:schneider-electric:insighthome_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:schneider-electric:insighthome_firmware:*:*:*:*:*:*:*:*range: <1.16
    • cpe:2.3:o:schneider-electric:insighthome_firmware:1.16:-:*:*:*:*:*:*
    • cpe:2.3:o:schneider-electric:insighthome_firmware:1.16:build_004:*:*:*:*:*:*
  • Schneider Electric/SEVD-2023-101-02llm-create
  • Schneider Electric/Conext Gatewayv5
    Range: v1.16 Build 004
  • Schneider Electric/InsightFacilityv5
    Range: v1.16 Build 004
  • Schneider Electric/InsightHomev5
    Range: v1.16 Build 004

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.