Technical Advisory – Multiple Vulnerabilities in Faronics Insight (CVE-2023-28344, CVE-2023-28345, CVE-2023-28346, CVE-2023-28347, CVE-2023-28348, CVE-2023-28349, CVE-2023-28350, CVE-2023-28351, CVE-2023-28352, CVE-2023-28353)
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Data Model Chat Messages - T1552.008 Cloud Api - T1059.009 Credentials - T1589.001 Javascript - T1059.007 Masquerading - T1655 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vnc - T1021.005 Windows Service - T1543.003 Vulnerabilities - T1588.006 Masquerading - T1036 Scripting - T1064 Denial Of Service Masquerading Scripting
Show in Graph
Common Information
Type Value
UUID 6df7b801-b14c-4bfa-90cc-8d572c2cf663
Fingerprint f4911c470d8f45d8
Analysis status DONE
Considered CTI value 2
Text language
Published May 30, 2023, 1 a.m.
Added to db June 5, 2023, 11:34 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline Technical Advisory – Multiple Vulnerabilities in Faronics Insight (CVE-2023-28344, CVE-2023-28345, CVE-2023-28346, CVE-2023-28347, CVE-2023-28348, CVE-2023-28349, CVE-2023-28350, CVE-2023-28351, CVE-2023-28352, CVE-2023-28353)
Title Technical Advisory – Multiple Vulnerabilities in Faronics Insight (CVE-2023-28344, CVE-2023-28345, CVE-2023-28346, CVE-2023-28347, CVE-2023-28348, CVE-2023-28349, CVE-2023-28350, CVE-2023-28351, CVE-2023-28352, CVE-2023-28353)
Detected Hints/Tags/Attributes 80/2/37
Source URLs
Redirection Url
Details Source https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
URL Provider
Details Provider Source level domain
Details nccgroup.com research.nccgroup.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 206 ✔ — https://research.nccgroup.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2023-28344
Details CVE 1 
cve-2023-28345
Details CVE 1 
cve-2023-28346
Details CVE 2 
cve-2023-28347
Details CVE 1 
cve-2023-28348
Details CVE 2 
cve-2023-28349
Details CVE 2 
cve-2023-28350
Details CVE 2 
cve-2023-28351
Details CVE 3 
cve-2023-28352
Details CVE 3 
cve-2023-28353
Details Domain 2 
faronics.com
Details Domain 98 
requests.post
Details Domain 52 
socket.io
Details File 4 
sas.dll
Details File 1 
c:\windows\system32\sas.dll
Details File 1 
fiteachersvc.exe
Details File 41 
wtsapi32.dll
Details File 37 
userenv.dll
Details File 11 
winsta.dll
Details File 13 
profapi.dll
Details File 54 
dbghelp.dll
Details File 53 
iphlpapi.dll
Details File 39 
winmm.dll
Details File 40 
cryptbase.dll
Details File 9 
powrprof.dll
Details File 2 
umpdc.dll
Details File 20 
sspicli.dll
Details File 2 
node.dll
Details File 1 
fiteacherserver.exe
Details File 1 
teacher.js
Details File 1 
fistudentsvc.exe
Details File 1 
fistudentagent.exe
Details File 1 
agent_id.jpeg
Details IPv4 59 
255.255.255.255
Details IPv4 1441 
127.0.0.1
Details Url 1 
https://faronics.com
Details Url 1 
http://127.0.0.1:8890