NVD

Id
40489  
Name
CVE-2013-5021  
Description
Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-08-06  
Modified Date
2013-09-17  
Seq
2013-5021  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205434 40489 CVE-2013-5021 http://digital.ni.com/public.nsf/allkb/04B876608790082C86257BD1000CC950?OpenDocument  View
205435 40489 CVE-2013-5021 http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument  View
205436 40489 CVE-2013-5021 http://www05.abb.com/global/scot/scot203.nsf/veritydisplay/5975a8a86c82eec2c125798e00551522/$file/SECURITY_BULLETIN_-_ABBVU-PACT-3BSE072617_DataManager_Vulnerability.pdf  View
205437 40489 CVE-2013-5021 http://zerodayinitiative.com/advisories/ZDI-13-120/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22084 JVNDB-2013-003659 複数の National Instruments 製品および ABB DataManager などの製品で使用される National Instruments cwui.ocx における絶対パストラバーサルの脆弱性 National Instruments LabWindows/CVI、National Instruments LabVIEW、および ABB DataManager Data Analysis コンポーネントなどの製品で使用される National Instruments cwui.ocx には、絶対パストラバーサルの脆弱性が存在します。 CVE-2013-5021 64963 CVE-2013-5021 40489 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003659.html 2013-03-22 2013-08-08 View