CVE-2023-29410

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute...

CVE-2023-29410

CVE-2023-29410 involves Schneider Electric Conext Gateway and an input validation error (CWE-20). The connected sources identify vulnerable versions as Conext Gateway v1.16 Build 004 and earlier, with an authenticated attacker able to escalate to the same privileges as the application on the serv...