Lucene search

NIVULNRICHMENT:CVE-2024-4081

HistoryJul 23, 2024 - 1:32 p.m.

CVE-2024-4081 Memory Corruption Due to Improper Length Check in NI LabVIEW

2024-07-2313:32:52

CWE-119

github.com

cve-2024-4081

memory corruption

ni labview

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

22.3%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects NI LabVIEW 2024 Q1 and prior versions.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ni:labview:-:*:*:*:*:*:*:*"
    ],
    "vendor": "ni",
    "product": "labview",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "24.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

22.3%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-4081