Ni System Configuration vulnerabilities

2 CVEs affecting Ni System Configuration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5602, published 2024-07-23.

More from Ni.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-4601, published 2023-10-18. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an…
• CVE-2024-5602, published 2024-07-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploitation requires an attacker to provide a…