CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5021

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.3%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2013-5021

Abb » Datamanager » Version: 1.0.0

cpe:2.3:a:abb:datamanager:1.0.0
Abb » Datamanager » Version: 6.3.6

cpe:2.3:a:abb:datamanager:6.3.6
Ni » Labview » Version: N/A

cpe:2.3:a:ni:labview:-
Ni » Labview » Version: 16.0.0.49152

cpe:2.3:a:ni:labview:16.0.0.49152
Ni » Labview » Version: 2012

cpe:2.3:a:ni:labview:2012
Ni » Labwindows » Version: N/A

cpe:2.3:a:ni:labwindows:-
Ni » Labwindows » Version: 2009

cpe:2.3:a:ni:labwindows:2009
Ni » Labwindows » Version: 2010

cpe:2.3:a:ni:labwindows:2010
Ni » Labwindows » Version: 2012

cpe:2.3:a:ni:labwindows:2012
Ni » Labwindows » Version: 8.5

cpe:2.3:a:ni:labwindows:8.5
Ni » Labwindows » Version: 9.0

cpe:2.3:a:ni:labwindows:9.0
Ni » Measurementstudio » Version: N/A

cpe:2.3:a:ni:measurementstudio:-
Ni » Measurementstudio » Version: 2013

cpe:2.3:a:ni:measurementstudio:2013
Ni » Teststand » Version: N/A

cpe:2.3:a:ni:teststand:-
Ni » Teststand » Version: 2012

cpe:2.3:a:ni:teststand:2012

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5021

Products

Pricing

Contact Us