5.5

CVE-2023-5136

Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure.  An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ni ≫ Topografix Data Plugin Version 2023 Update - SwPlatform gpx
Ni ≫ Diadem Version 2014
Ni ≫ Diadem Version 2015 Update -
Ni ≫ Diadem Version 2015 Update sp2
Ni ≫ Diadem Version 2017 Update -
Ni ≫ Diadem Version 2017 Update sp1
Ni ≫ Diadem Version 2018 Update -
Ni ≫ Diadem Version 2018 Update sp1
Ni ≫ Diadem Version 2019 Update -
Ni ≫ Diadem Version 2019 Update sp1
Ni ≫ Diadem Version 2020 Update -
Ni ≫ Diadem Version 2020 Update sp1
Ni ≫ Diadem Version 2021 Update -
Ni ≫ Diadem Version 2021 Update sp1
Ni ≫ Diadem Version 2022 Update q2
Ni ≫ Diadem Version 2022 Update q4
Ni ≫ Diadem Version 2023 Update q2
Ni ≫ Veristand Version 2013 Update sp1
Ni ≫ Veristand Version 2014
Ni ≫ Veristand Version 2015 Update -
Ni ≫ Veristand Version 2015 Update sp1
Ni ≫ Veristand Version 2016
Ni ≫ Veristand Version 2017
Ni ≫ Veristand Version 2018 Update -
Ni ≫ Veristand Version 2018 Update sp1
Ni ≫ Veristand Version 2019 Update -
Ni ≫ Veristand Version 2019 Update r2
Ni ≫ Veristand Version 2019 Update r3
Ni ≫ Veristand Version 2019 Update r3f1
Ni ≫ Veristand Version 2020 Update -
Ni ≫ Veristand Version 2020 Update r2
Ni ≫ Veristand Version 2020 Update r3
Ni ≫ Veristand Version 2020 Update r4
Ni ≫ Veristand Version 2020 Update r5
Ni ≫ Veristand Version 2020 Update r6
Ni ≫ Veristand Version 2021 Update -
Ni ≫ Veristand Version 2021 Update r2
Ni ≫ Veristand Version 2021 Update r3
Ni ≫ Veristand Version 2023 Update q1
Ni ≫ Veristand Version 2023 Update q2
Ni ≫ Veristand Version 2023 Update q3
Ni ≫ Veristand Version 2023 Update q4
Ni ≫ Flexlogger Version 2018 Update r1
Ni ≫ Flexlogger Version 2018 Update r2
Ni ≫ Flexlogger Version 2018 Update r3
Ni ≫ Flexlogger Version 2018 Update r4
Ni ≫ Flexlogger Version 2019 Update r1
Ni ≫ Flexlogger Version 2019 Update r2
Ni ≫ Flexlogger Version 2019 Update r3
Ni ≫ Flexlogger Version 2019 Update r4
Ni ≫ Flexlogger Version 2020 Update r1
Ni ≫ Flexlogger Version 2020 Update r2
Ni ≫ Flexlogger Version 2020 Update r3
Ni ≫ Flexlogger Version 2020 Update r4
Ni ≫ Flexlogger Version 2021 Update r1
Ni ≫ Flexlogger Version 2021 Update r2
Ni ≫ Flexlogger Version 2021 Update r3
Ni ≫ Flexlogger Version 2021 Update r4
Ni ≫ Flexlogger Version 2022 Update q2
Ni ≫ Flexlogger Version 2022 Update q4
Ni ≫ Flexlogger Version 2023 Update q1
Ni ≫ Flexlogger Version 2023 Update q2
Ni ≫ Flexlogger Version 2023 Update q3
Ni ≫ Flexlogger Version 2023 Update q4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.164
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
security@ni.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignment-in-the-topografix-dataplug-for-gpx.html
Vendor Advisory