CVE-2013-5021 - CVE House
Back to Database
Status published Critical CVE-2013-5021

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as...

Vulnerability Description

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-5021

Credits & Attribution

No credits recorded in the NVD database.

References

More from ni

View All →
CVE-2022-42718
Incorrect default permissions in the installation folder for NI LabVIEW...
Unknown 0
CVE-2022-35415
An improper input validation in NI System Configuration Manager before...
High 7.8
CVE-2022-27237
There is a cross-site scripting (XSS) vulnerability in an NI...
Medium 6.1
CVE-2021-42563
There is an Unquoted Service Path in NI Service Locator...
High 7.8
CVE-2021-38304
Improper input validation in the National Instruments NI-PAL driver in...
High 7.8

Affected Vendor

Affected Software

labview, labwindows, measurementstudio, teststand, datamanager
Vulnerable Versions:
0, 1.0.0, 6.3.6

Timeline

Official Publish: August 6th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.