CVE-2021-42563

HIGH 7.8CVE-2021-42563 · Published 12/11/2021 · updated 17/06/2026

In short

CVE-2021-42563 is a HIGH (CVSS 7.8) vulnerability affecting ni service locator (ni).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 14.3% of all vulnerabilities.
Fix: update to 18.0.0.49152 or later.

Package	Affected versions	Patched versions
ni service locator ni	`< 18.0.0.49152`	`18.0.0.49152`

Description

There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.

References

ni.com/en-us/support/documentation/supplemental/21/unquoted-service-path-in-ni-service-locator.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free