CVE-2023-29410

🗓️ 18 Apr 2023 21:13:55Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 35 Views

Improper Input Validation vulnerability allows authenticated attacker to gain server privileges via malicious HTTP payload

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-29410	19 Apr 202302:40	–	circl
CNNVD	Schneider Electric Conext Gateway 输入验证错误漏洞	18 Apr 202300:00	–	cnnvd
CNVD	Schneider Electric Conext Gateway Input Validation Error Vulnerability	21 Apr 202300:00	–	cnvd
Cvelist	CVE-2023-29410	18 Apr 202321:13	–	cvelist
EUVD	EUVD-2023-32979	3 Oct 202520:07	–	euvd
NVD	CVE-2023-29410	18 Apr 202322:15	–	nvd
Prion	Input validation	18 Apr 202322:15	–	prion
Positive Technologies	PT-2023-3285 · Unknown · Insighthome +1	18 Apr 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-29410	18 Apr 202321:13	–	vulnrichment

NVD

Node

schneider-electric insighthome_firmwareRange<1.16

schneider-electric insighthome_firmwareMatch1.16-

schneider-electric insighthome_firmwareMatch1.16build_004

AND

schneider-electric insighthomeMatch-

Node

schneider-electric insightfacility_firmwareRange<1.16

schneider-electric insightfacility_firmwareMatch1.16-

schneider-electric insightfacility_firmwareMatch1.16build_004

AND

schneider-electric insightfacilityMatch-

Node

schneider-electric conext_gateway_firmwareRange<1.16

schneider-electric conext_gateway_firmwareMatch1.16-

schneider-electric conext_gateway_firmwareMatch1.16build_004

AND

schneider-electric conext_gatewayMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "InsightHome",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "prior",
        "status": "affected",
        "version": "v1.16 Build 004",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "InsightFacility",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "prior",
        "status": "affected",
        "version": "v1.16 Build 004",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Conext Gateway",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "lessThanOrEqual": "prior",
        "status": "affected",
        "version": "v1.16 Build 004",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 07:57Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.2 - 8.8

EPSS0.00464

SSVC

CWE-20