CVE-2023-4601: Stack-based Buffer Overflow in NI System Configuration Software
Published Oct 18, 2023
·Updated
A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and all previous versions.
Affected Software
4 affected components
All of the following
Any of the following
NI System Configuration<2023
NI System Configuration=2023-q2
NI System Configuration=2023-q3
Microsoft Windows
Event History
Oct 18, 2023
CVE Published
via MITRE·07:15 PM
Data Sourced
via MITRE·07:15 PM
DescriptionSeverityWeakness
Data Sourced
08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-4601.
2
What is the severity of CVE-2023-4601?
The severity of CVE-2023-4601 is critical (9.8).
3
What is the affected software?
The affected software is NI System Configuration 2023 Q3 and all previous versions.
4
What is the potential impact of CVE-2023-4601?
CVE-2023-4601 may result in information disclosure and/or arbitrary code execution.
5
How can I fix CVE-2023-4601?
To fix CVE-2023-4601, apply the latest security patch or upgrade to a non-vulnerable version of NI System Configuration.