The vulnerability of the I/O Trace Tool (formerly NI-Spy) detection and analysis utility for applications within the System Configuration package allows a hacker to execute arbitrary code by causing an operation to go beyond the buffer boundaries in memory.

🗓️ 31 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

The I/O Trace Tool in System Configuration may execute arbitrary code by overflowing memory buffers with a nitrace file.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-5602	23 Jul 202417:14	–	circl
CNNVD	NI I/O Trace Tool 安全漏洞	23 Jul 202400:00	–	cnnvd
CVE	CVE-2024-5602	23 Jul 202413:15	–	cve
Cvelist	CVE-2024-5602 Stack-based Buffer Overflow Vulnerability in NI I/O Trace Tool	23 Jul 202413:15	–	cvelist
EUVD	EUVD-2024-46787	3 Oct 202520:07	–	euvd
ICS	National Instruments IO Trace	23 Jul 202406:00	–	ics
NVD	CVE-2024-5602	23 Jul 202414:15	–	nvd
Positive Technologies	PT-2024-5245 · National Instruments · Ni I/O Trace Tool	6 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5602	5 Feb 202506:30	–	redhatcve
Vulnrichment	CVE-2024-5602 Stack-based Buffer Overflow Vulnerability in NI I/O Trace Tool	23 Jul 202413:15	–	vulnrichment

Vulners

Node

national_instruments i/o_trace_toolRange≤24.3

Source	Link
vuldb	www.vuldb.com/ru/
ni	www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/stack-based-buffer-overflow-vulnerability-in-ni-io-trace-tool.html
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-205-01
ni	www.ni.com/docs/en-US/bundle/ni-io-trace/page/iotrace/iotraceoverview.html
ni	www.ni.com/docs/en-US/bundle/ecu-measurement-calibration-toolkit/page/ni-io-trace.html
web	www.web.nvd.nist.gov/view/vuln/detail

31 Jul 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.2

CVSS 37.8

EPSS0.00306

input output trace system configuration package memory buffer overflow nitrace file arbitrary code execution