CVE-2024-23609: Improper Error Handling Issue in LabVIEW
Published Mar 11, 2024
·Updated
An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.
Affected Software
11 affected components
NI LabVIEW<=2020
NI LabVIEW=2021
NI LabVIEW=2021-sp1
NI LabVIEW=2022-q1
NI LabVIEW=2022-q3
NI LabVIEW=2023-q1
NI LabVIEW=2023-q3
NI LabVIEW=2023-q3_patch1
NI LabVIEW=2023-q3_patch2
NI LabVIEW=2024-q1
National Instruments LabVIEW<2024 Q1
Event History
Mar 11, 2024
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23609?
CVE-2024-23609 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2024-23609?
To fix CVE-2024-23609, update LabVIEW to version 2024 Q2 or later.
3
Does CVE-2024-23609 affect all versions of LabVIEW?
CVE-2024-23609 affects LabVIEW 2024 Q1 and prior versions.
4
What could an attacker achieve by exploiting CVE-2024-23609?
An attacker could execute arbitrary code on a victim's machine by exploiting CVE-2024-23609.
5
What is required for successful exploitation of CVE-2024-23609?
Successful exploitation of CVE-2024-23609 requires the attacker to provide a user with a specially crafted VI.