CVE-2022-42718
First published: Thu Dec 01 2022(Updated: )
Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NI LabVIEW Command Line Interface | <22.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-42718.
What is the title of this vulnerability?
The title of this vulnerability is 'Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI)'.
What is the description of this vulnerability?
The description of this vulnerability is 'Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access.'
What is the affected software?
The affected software is NI LabVIEW Command Line Interface (CLI) with version up to 22.3.1.
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 7.8.
How can an authenticated user exploit this vulnerability?
An authenticated user can potentially enable escalation of privilege via local access.
How can I fix this vulnerability?
To fix this vulnerability, ensure that correct permissions are set in the installation folder for NI LabVIEW Command Line Interface (CLI).
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at the following link: https://www.ni.com/en-us/support/documentation/supplemental/22/privilege-escalation-in-ni-labview-cli-.html
What is the CWE ID associated with this vulnerability?
The CWE ID associated with this vulnerability is CWE-276.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ni
- canonical/ni labview command line interface