CVE-2013-5022 - CVE House
Back to Database
Status published Critical CVE-2013-5022

Absolute path traversal vulnerability in the 3D Graph ActiveX control...

Vulnerability Description

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-5022

Credits & Attribution

No credits recorded in the NVD database.

References

More from ni

View All →
CVE-2022-42718
Incorrect default permissions in the installation folder for NI LabVIEW...
Unknown 0
CVE-2022-35415
An improper input validation in NI System Configuration Manager before...
High 7.8
CVE-2022-27237
There is a cross-site scripting (XSS) vulnerability in an NI...
Medium 6.1
CVE-2021-42563
There is an Unquoted Service Path in NI Service Locator...
High 7.8
CVE-2021-38304
Improper input validation in the National Instruments NI-PAL driver in...
High 7.8

Affected Vendor

Affected Software

labview, labwindows, measurementstudio, teststand
Vulnerable Versions:
0

Timeline

Official Publish: August 6th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.