CVE-2024-23612: Improper Error Handling Issue in LabVIEW
Published Mar 11, 2024
·Updated
An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.
Affected Software
11 affected components
NI LabVIEW<=2020
NI LabVIEW=2021
NI LabVIEW=2021-sp1
NI LabVIEW=2022-q1
NI LabVIEW=2022-q3
NI LabVIEW=2023-q1
NI LabVIEW=2023-q3
NI LabVIEW=2023-q3_patch1
NI LabVIEW=2023-q3_patch2
NI LabVIEW=2024-q1
National Instruments LabVIEW<2024 Q1
Event History
Mar 11, 2024
CVE Published
via MITRE·03:19 PM
Data Sourced
via MITRE·03:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23612?
CVE-2024-23612 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-23612?
To resolve CVE-2024-23612, upgrade to the latest version of National Instruments LabVIEW beyond 2024 Q1.
3
What impact does CVE-2024-23612 have on LabVIEW?
CVE-2024-23612 allows attackers to exploit improper error handling to execute arbitrary code remotely.
4
Who is affected by CVE-2024-23612?
CVE-2024-23612 affects users of National Instruments LabVIEW 2024 Q1 and earlier versions.
5
How can an attacker exploit CVE-2024-23612?
An attacker can exploit CVE-2024-23612 by providing a specially crafted VI to a user.