Ni vulnerabilities
104 vulnerabilities
Known vulnerabilities in Ni products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.
Products
37- Labview50 vulnerabilities
- Flexlogger8 vulnerabilities
- Instrumentstudio8 vulnerabilities
- Circuit Design Suite7 vulnerabilities
- Grpc Device7 vulnerabilities
- Ni Grpc Device Server7 vulnerabilities
- Veristand7 vulnerabilities
- Dasylab6 vulnerabilities
- Systemlink Server6 vulnerabilities
- Systemlink5 vulnerabilities
- Labwindows4 vulnerabilities
- Measurementstudio4 vulnerabilities
- Ni Pal4 vulnerabilities
- Teststand3 vulnerabilities
- Diadem2 vulnerabilities
- G Web Development Software2 vulnerabilities
- Compactrio1 vulnerabilities
- Configuration Manager1 vulnerabilities
- Daqexpress1 vulnerabilities
- Data Record AD1 vulnerabilities
- Flexrio1 vulnerabilities
- FRC Game Tools1 vulnerabilities
- IO Trace Tool1 vulnerabilities
- Labview Command Line Interface1 vulnerabilities
- Lookout1 vulnerabilities
- Measurementlink1 vulnerabilities
- Ni Service Locator1 vulnerabilities
- NI Imaqdx1 vulnerabilities
- Static Test Software Suite1 vulnerabilities
- System Configuration1 vulnerabilities
- Systemlink Enterprise1 vulnerabilities
- Topografix Data Plugin1 vulnerabilities
- Topografix Dataplugin For GPX1 vulnerabilities
- Vision Acquisition Software1 vulnerabilities
- Vision Builder Ai1 vulnerabilities
- Vision Builder For Automated Inspection1 vulnerabilities
- Vision Development Module1 vulnerabilities
CVE-2013-5026nilookout
EPSS score3.59%
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.CVE-2013-5022nilabview+3EPSS score2.57%
Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.CVE-2013-5023nidiadem+4EPSS score1.32%
The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files.CVE-2013-5021abbdatamanager+4EPSS score2.07%
Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.CVE-2013-5024nimeasurementstudioEPSS score1.19%
An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted (1) key-open or (2) key-close method calls.CVE-2013-5025nilabwindowsEPSS score1.32%
An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files.CVE-2021-42563nini_service_locatorEPSS score0.23%
There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.CVE-2021-38304nini-palEPSS score0.44%
Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2025-2630nilabviewEPSS score0.19%
There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-2631nilabviewEPSS score0.20%
Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW in InitCPUInformation() that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-2632nilabviewEPSS score0.20%
Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW reading CPU info from cache that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-2450nivision_builder_aiEPSS score0.53%
NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI Vision Builder AI. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of VBAI files. The issue results from allowing the execution of dangerous script without user warning. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22833.CVE-2025-2634nilabviewEPSS score0.17%
Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-2449niflexloggerEPSS score33.70%
NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of NI FlexLogger. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of URI files by the usiReg component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-21805.CVE-2025-2633nilabviewEPSS score0.17%
Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in lvre!UDecStrToNum that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-2629nilabviewEPSS score0.19%
There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW when loading NI Error Reporting. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-7849nilabviewEPSS score0.26%
A memory corruption vulnerability due to improper error handling when a VILinkObj is null exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-7361nilabviewEPSS score0.30%
A code injection vulnerability due to an improper initialization check exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI using a CIN node. This vulnerability affects 32-bit NI LabVIEW 2025 Q1 and prior versions. LabVIEW 64-bit versions do not support CIN nodes and are not affected.CVE-2025-7848nilabviewEPSS score5.71%
A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.CVE-2025-64461nilabviewEPSS score0.16%
There is an out of bounds write vulnerability in NI LabVIEW in mgocre_SH_25_3!RevBL() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.