PT-2024-19963 · National Instruments · Labview
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LabVIEW versions prior to 2024 Q1
Description
An improper error handling issue may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI.
Recommendations
For versions prior to 2024 Q1, update to a version newer than 2024 Q1 to resolve the issue. As a temporary workaround, consider restricting the use of specially crafted VIs to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Labview