CVE-2013-5022

CRITICAL 10.0CVE-2013-5022 · Published 06/08/2013 · updated 16/06/2026

In short

CVE-2013-5022 is a CRITICAL (CVSS 10.0) vulnerability affecting labview (ni), labwindows (ni), measurementstudio (ni).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
labview ni	`≤ 2012`	No fix yet
labwindows ni	`≤ 2012`	No fix yet
measurementstudio ni	`≤ 2013`	No fix yet
teststand ni	`≤ 2012`	No fix yet

Description

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

References

More vulnerabilities in labview

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

labview

≤ 2012

No fix yet

labwindows

≤ 2012

No fix yet

measurementstudio

≤ 2013

No fix yet

teststand

≤ 2012

No fix yet

Description

More vulnerabilities in labview

See all →