Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio
Vulnerability Description
A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects NI FlexLogger 2024 Q1 and prior versions as well as NI InstrumentStudio 2024 Q1 and prior versions.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
NI InstrumentStudio 代码问题漏洞
Vulnerability Description
NI InstrumentStudio是NI公司的一款应用软件,提供交互式 PXI 测量的集成方法、监控和调试测试系统的能力。 NI FlexLogger 2024 Q1版本及之前版本、NI InstrumentStudio 2024 Q1版本及之前版本存在代码问题漏洞。攻击者利用该漏洞可以远程执行代码。
CVSS Information
N/A
Vulnerability Type
N/A