Privilege Escalation Vulnerability in NI LabVIEW Command Line Interface
CVE-2022-42718

7.8HIGH

Key Information:

Vendor

Ni

Status
Labview Command Line Interface
Vendor
CVE Published:
1 December 2022

What is CVE-2022-42718?

The NI LabVIEW Command Line Interface (CLI) contains a vulnerability due to incorrect default permissions set in its installation folder. This security flaw can potentially allow an authenticated user to escalate their privileges if local access to the system is obtained. Such a scenario may lead to unauthorized actions within the software, creating significant security implications.

References

https://www.ni.com/en-us/support/documentation/supplement...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.