CVE-2023-28353

An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any type of file to any location on the Teacher Console's computer, enabling a variety of different exploitation paths including code execution. It is also possible for the attacker to chain this vulnerability with others to cause a deployed DLL file to immediately execute as NT AUTHORITY/SYSTEM.

• CWE-434
• CWE-434

• https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/Exploit, Third Party Advisory
• https://research.nccgroup.com/?research=Technical%20advisoriesThird Party Advisory
• https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/Exploit, Third Party Advisory
• https://research.nccgroup.com/?research=Technical%20advisoriesThird Party Advisory

Published

May 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28348An issue was discovered in Faronics Insight 10.0.19045 on Wi…7.4
• CVE-2023-28349An issue was discovered in Faronics Insight 10.0.19045 on Wi…8.8
• CVE-2023-2835The WP Directory Kit plugin for WordPress is vulnerable to R…6.1
• CVE-2023-28350An issue was discovered in Faronics Insight 10.0.19045 on Wi…6.1
• CVE-2023-28351An issue was discovered in Faronics Insight 10.0.19045 on Wi…3.3
• CVE-2023-28352An issue was discovered in Faronics Insight 10.0.19045 on Wi…7.4
• CVE-2023-28354An issue was discovered in Opsview Monitor Agent 6.8. An una…9.8
• CVE-2023-28356A vulnerability has been identified where a maliciously craf…7.5
• CVE-2023-28357A vulnerability has been identified in Rocket.Chat, where th…4.3
• CVE-2023-28358A vulnerability has been discovered in Rocket.Chat where a m…6.1
• CVE-2023-28359A NoSQL injection vulnerability has been identified in the l…5.3
• CVE-2023-2836The CRM Perks Forms plugin for WordPress is vulnerable to St…4.8