Remote Code Execution Vulnerability in LabVIEW

CVE-2024-23609

What is CVE-2024-23609?

An improper error handling vulnerability in LabVIEW can lead to significant security risks, including potential remote code execution. Malicious actors can exploit this flaw by crafting specially designed Virtual Instruments (VIs), which, when executed by the user, may trigger unauthorized actions within the target system. This vulnerability affects LabVIEW 2024 Q1 and earlier versions, emphasizing the need for users to apply available patches and updates from National Instruments to enhance their system security.

References