CVE-2013-5023

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files.

Vulnerabilidad sin especificar en un control ActiveX en el componente HelpAsst en NI Help Links in National Instruments LabWindows/CVI, LabVIEW, y otros productos, tiene un impacto desconocido y vectores de ataque remotos.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-07-31 CVE Reserved
2013-08-06 CVE Published
2024-06-26 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (3)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://digital.ni.com/public.nsf/allkb/E6BC4F119D49A97A86257BD3004FE019?OpenDocument	2013-09-25
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument	2013-09-25
http://digital.ni.com/public.nsf/websearch/5C87A3AA7300868986257B3600501FE6?OpenDocument	2013-09-25

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ni Search vendor "Ni"		Diadem Search vendor "Ni" for product "Diadem"				<= 2012 Search vendor "Ni" for product "Diadem" and version " <= 2012"		-		Affected
Ni Search vendor "Ni"		Labview Search vendor "Ni" for product "Labview"				<= 2012 Search vendor "Ni" for product "Labview" and version " <= 2012"		-		Affected
Ni Search vendor "Ni"		Labwindows Search vendor "Ni" for product "Labwindows"				<= 2012 Search vendor "Ni" for product "Labwindows" and version " <= 2012"		-		Affected
Ni Search vendor "Ni"		Measurementstudio Search vendor "Ni" for product "Measurementstudio"				<= 2013 Search vendor "Ni" for product "Measurementstudio" and version " <= 2013"		-		Affected
Ni Search vendor "Ni"		Teststand Search vendor "Ni" for product "Teststand"				<= 2012 Search vendor "Ni" for product "Teststand" and version " <= 2012"		-		Affected