CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-29410

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.2%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2023-29410

Schneider-Electric » Conext Gateway » Version: N/A

cpe:2.3:h:schneider-electric:conext_gateway:-
Schneider-Electric » Insightfacility » Version: N/A

cpe:2.3:h:schneider-electric:insightfacility:-
Schneider-Electric » Insighthome » Version: N/A

cpe:2.3:h:schneider-electric:insighthome:-
Schneider-Electric » Conext Gateway Firmware » Version: Any

cpe:2.3:o:schneider-electric:conext_gateway_firmware:*
Schneider-Electric » Conext Gateway Firmware » Version: 1.16

cpe:2.3:o:schneider-electric:conext_gateway_firmware:1.16
Schneider-Electric » Insightfacility Firmware » Version: Any

cpe:2.3:o:schneider-electric:insightfacility_firmware:*
Schneider-Electric » Insightfacility Firmware » Version: 1.16

cpe:2.3:o:schneider-electric:insightfacility_firmware:1.16
Schneider-Electric » Insighthome Firmware » Version: Any

cpe:2.3:o:schneider-electric:insighthome_firmware:*
Schneider-Electric » Insighthome Firmware » Version: 1.16

cpe:2.3:o:schneider-electric:insighthome_firmware:1.16

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-29410

Products

Pricing

Contact Us