CVE-2024-12741: Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File
A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that DAQExpress is an EOL product and will not receive any updates.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12741?
CVE-2024-12741 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2024-12741?
To fix CVE-2024-12741, users should update to NI DAQExpress version 5.2 or later.
What causes CVE-2024-12741?
CVE-2024-12741 is caused by a deserialization of untrusted data vulnerability in NI DAQExpress.
What versions of NI DAQExpress are affected by CVE-2024-12741?
CVE-2024-12741 affects NI DAQExpress version 5.1 and all prior versions.
Can CVE-2024-12741 lead to data breaches?
Yes, successful exploitation of CVE-2024-12741 can allow attackers to execute arbitrary code, potentially leading to data breaches.