Lucene search

PRIOn knowledge basePRION:CVE-2023-4570

HistoryOct 05, 2023 - 4:15 p.m.

Improper access control

2023-10-0516:15:00

PRIOn knowledge base

www.prio-n.com

access control

ni measurementlink

python

adjacent network

localhost

attackers

services

exposed

unreachable

version 1.1.0

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.

CPENameOperatorVersion
measurementlinkge1.0.0
measurementlinklt1.1.1

CPE	Name	Operator	Version
	measurementlink	ge	1.0.0
	measurementlink	lt	1.1.1

References

www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html