CVE-2013-5022: Ni Labview

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

Affected products

• Ni Labview: up to and including 2012
• Ni Labwindows: up to and including 2012
• Ni Measurementstudio: up to and including 2013
• Ni Teststand: up to and including 2012

Published 2013-08-06. Last modified 2026-06-16.