7.8

CVE-2024-23610

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.

Data is provided by the National Vulnerability Database (NVD)
Ni ≫ Labview Version <= 2020
Ni ≫ Labview Version2021 Update- SwEdition-
Ni ≫ Labview Version2021 Updatesp1
Ni ≫ Labview Version2022 Updateq1
Ni ≫ Labview Version2022 Updateq3
Ni ≫ Labview Version2023 Updateq1
Ni ≫ Labview Version2023 Updateq3
Ni ≫ Labview Version2023 Updateq3_patch1
Ni ≫ Labview Version2023 Updateq3_patch2
Ni ≫ Labview Version2024 Updateq1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.44% 0.799
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@ni.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.