Ni

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-6794 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted messa...Show more A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6793 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. T...Show more A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6791 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafte...Show more A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6638 1Ni 1Labview Jun 17, 2026 Jul 22, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially craft...Show more An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.Show less
CVE-2024-6122 1Ni 2Flexlogger Systemlink Jun 17, 2026 Jul 22, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and pri...Show more An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.Show less
CVE-2024-6121 1Ni 2Flexlogger Systemlink Jun 17, 2026 Jul 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI F...Show more An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.Show less
CVE-2024-23612 1Ni 1Labview Jun 17, 2026 Mar 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 20...Show more An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.Show less
CVE-2024-23611 1Ni 1Labview Jun 17, 2026 Mar 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects...Show more An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions. Show less
CVE-2024-23610 1Ni 1Labview Jun 17, 2026 Mar 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects...Show more An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions. Show less
CVE-2024-23609 1Ni 1Labview Jun 17, 2026 Mar 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 20...Show more An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.Show less
CVE-2024-23608 1Ni 1Labview Jun 17, 2026 Mar 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affect...Show more An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions. Show less
CVE-2023-5136 1Ni 4Diadem FlexloggerTopografix Data Plugin+1 more Jun 17, 2026 Nov 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.
CVE-2023-4601 1Ni 1System Configuration Jun 17, 2026 Oct 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a s...Show more A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and all previous versions. Show less
CVE-2023-4570 1Ni 1Measurementlink Jun 17, 2026 Oct 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outsid...Show more An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions. Show less
CVE-2022-42718 1Ni 1Labview Command Line Interface Jun 17, 2026 Dec 1, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-35415 1Ni 1Configuration Manager Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-27237 1Ni 5Flexlogger G Web Development SoftwareLabview+2 more Jun 17, 2026 Apr 21, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3...Show more There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.Show less
CVE-2021-42563 1Ni 1Ni Service Locator Jun 17, 2026 Nov 12, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate pr...Show more There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.Show less
CVE-2021-38304 1Ni 1Ni Pal Jun 17, 2026 Sep 17, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-25191 1Ni 1Compactrio Firmware Jun 17, 2026 Dec 11, 2020 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely.

Previous 1 2 345 Next