CVE-2023-5136: Ni Diadem

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.

Affected products

• Ni Diadem: version 2014 only; version 2015 only; version 2017 only; version 2018 only; version 2019 only; version 2020 only; …
• Ni Flexlogger: version 2018 only; version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Ni Topografix Data Plugin: version 2023 only
• Ni Veristand: version 2013 only; version 2014 only; version 2015 only; version 2016 only; version 2017 only; version 2018 only; …

Published 2023-11-08. Last modified 2026-06-17.