All CVE records

CVE-2023-29492 — Novi Survey Insecure Deserialization Vulnerability

CISA KEV listed Added April 13, 2023 Remediate by May 4, 2023

Description

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

Required action

Apply updates per vendor instructions.

Notes

https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx; https://nvd.nist.gov/vuln/detail/CVE-2023-29492

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer