CVE-2023-29410 (published 2023-04-18T21:13:55.322Z)

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated
attacker to gain the same privilege as the application on the server when a malicious payload is
provided over HTTP for the server to execute. 

 




Affected products: Vendor: Schneider Electric
Product: InsightHome
Versions: v1.16 Build 004