Lucene search

K
cve[email protected]CVE-2013-5022
HistoryAug 06, 2013 - 8:55 p.m.

CVE-2013-5022

2013-08-0620:55:05
CWE-22
web.nvd.nist.gov
22
vulnerability
absolute path
traversal
national instruments
labwindows
cvi
3d graph
activex
labview

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

Affected configurations

NVD
Node
nilabviewRange2012
OR
nilabwindowsRange2012
OR
nimeasurementstudioRange2013
OR
niteststandRange2012

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%