CVE-2023-4570

Published: Oct 5, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.

Affected (1)

Products: Ni: Measurementlink

1 product

Measurementlink

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ni Measurementlink	From 1.0.0 to 1.1.1

Related CWEs

Unprotected Alternate Channel

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

References (2)

https://www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html

Source: security@ni.com

Vendor Advisory

https://www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.