Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-4601

A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and all previous versions.

Published

2023-10-18T20:15:09.340

Last Modified

2024-11-21T08:35:31.263

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses

Type: Secondary
CWE-121
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ni	system_configuration	< 2023	Yes
Application	ni	system_configuration	2023	Yes
Application	ni	system_configuration	2023	Yes
Operating System	microsoft	windows	-	No

References

https://www.ni.com/en/support/documentation/supplemental/23/stack-based-buffer-overflow-in-ni-system-configuration.html Mitigation, Vendor Advisory ([email protected])
https://www.ni.com/en/support/documentation/supplemental/23/stack-based-buffer-overflow-in-ni-system-configuration.html Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)