CVE-2023-29492

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx; https://nvd.nist.gov/vuln/detail/CVE-2023-29492

Remediation deadline: May 4, 2023

Description

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

Timeline

Published:April 13th, 2023 12:00 AM

Last modified:April 13th, 2023 12:00 AM

Added to KEV:April 13th, 2023

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Novi Survey

Products

Novi Survey

Weaknesses (CWE)

CWE-94

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute