CVE-2022-42718: High severity ni labview vulnerability
Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-42718.
What is the title of this vulnerability?
The title of this vulnerability is 'Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI)'.
What is the description of this vulnerability?
The description of this vulnerability is 'Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access.'
What is the affected software?
The affected software is NI LabVIEW Command Line Interface (CLI) with version up to 22.3.1.
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 7.8.
How can an authenticated user exploit this vulnerability?
An authenticated user can potentially enable escalation of privilege via local access.
How can I fix this vulnerability?
To fix this vulnerability, ensure that correct permissions are set in the installation folder for NI LabVIEW Command Line Interface (CLI).
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at the following link: https://www.ni.com/en-us/support/documentation/supplemental/22/privilege-escalation-in-ni-labview-cli-.html
What is the CWE ID associated with this vulnerability?
The CWE ID associated with this vulnerability is CWE-276.