ni Vulnerability Advisory Catalog

Total 88 security vulnerabilities recorded for ni software and firmware.

← Back to All Vendors
Component: system_configuration

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execut...

📅 2023-10-18
CVSS 8.1 Dossier →
Component: measurementlink

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on local...

📅 2023-10-05
CVSS 8.8 Dossier →
Component: labview_command_line_interface

Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially en...

📅 2022-12-01
CVSS 7.8 Dossier →
Component: configuration_manager

An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation of privilege ...

📅 2022-09-16
CVSS 7.8 Dossier →
Component: flexlogger

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in u...

📅 2022-04-21
CVSS 6.1 Dossier →
Component: ni_service_locator

There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user t...

📅 2021-11-12
CVSS 7.8 Dossier →
Component: ni-pal

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable esc...

📅 2021-09-17
CVSS 7.8 Dossier →
Component: compactrio_firmware

Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that co...

📅 2020-12-11
CVSS 7.5 Dossier →
Component: labview

An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVI...

📅 2017-09-05
CVSS 7.5 Dossier →
Component: labview

An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabVIEW before 2015 SP1 f7 Patch a...

📅 2017-03-31
CVSS 7.5 Dossier →
CVE-2013-5026 UNKNOWN
Component: lookout

An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to ex...

📅 2013-08-06
CVSS 9.3 Dossier →
CVE-2013-5025 UNKNOWN
Component: labwindows

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denia...

📅 2013-08-06
CVSS 4.3 Dossier →
CVE-2013-5024 UNKNOWN
Component: measurementstudio

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier...

📅 2013-08-06
CVSS 4.3 Dossier →
CVE-2013-5023 UNKNOWN
Component: diadem

The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earl...

📅 2013-08-06
CVSS 4.3 Dossier →
CVE-2013-5022 UNKNOWN
Component: labview

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, Lab...

📅 2013-08-06
CVSS 10.0 Dossier →
CVE-2013-5021 UNKNOWN
Component: labview

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier...

📅 2013-08-06
CVSS 9.3 Dossier →
Page 4 of 4 (88 Total Records)