Lucene search

K
cveMitreCVE-2013-5024
HistoryAug 06, 2013 - 8:55 p.m.

CVE-2013-5024

2013-08-0620:55:05
mitre
web.nvd.nist.gov
20
nationalinstruments
activex
security vulnerability
measurement studio
remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.3%

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted (1) key-open or (2) key-close method calls.

Affected configurations

Nvd
Node
nimeasurementstudioRange2013
VendorProductVersionCPE
nimeasurementstudio*cpe:2.3:a:ni:measurementstudio:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.3%

Related for CVE-2013-5024