Lucene search

K
cve[email protected]CVE-2013-5021
HistoryAug 06, 2013 - 8:55 p.m.

CVE-2013-5021

2013-08-0620:55:05
CWE-22
web.nvd.nist.gov
25
cve
2013
national instruments
labwindows
cvi
labview
abb datamanager
data analysis
activex
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.898 High

EPSS

Percentile

98.8%

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.

Affected configurations

NVD
Node
nilabviewRange2012
OR
nilabwindowsRange2012
OR
nimeasurementstudioRange2013
OR
niteststandRange2012
Node
abbdatamanagerMatch1.0.0
OR
abbdatamanagerMatch6.3.6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.898 High

EPSS

Percentile

98.8%

Related for CVE-2013-5021