Skip to content
OpenAdvisories
High · 7.2 CVE-2023-29410 EUVD-2023-32979GHSA-frqc-8338-cjmx

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the appli…

Published Apr 18, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Conext Gateway Product: InsightFacility Product: InsightHome Category: ICS / OT

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated
attacker to gain the same privilege as the application on the server when a malicious payload is
provided over HTTP for the server to execute.

Affected products

VendorProductAffectedFixed
Schneider Electric InsightHome v1.16 Build 004 – ≤ prior —
Schneider Electric InsightFacility v1.16 Build 004 – ≤ prior —
Schneider Electric Conext Gateway v1.16 Build 004 – ≤ prior —

Advisories 1

References