CVE-2024-12741
Deserialization Of Untrusted Data Vulnerability In NI DAAQAExpress Project File
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Deserialization Of Untrusted Data Vulnerability In NI DAAQAExpress Project File
A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that DAQExpress is an EOL product and will not receive any updates.
Reserved 2024-12-17 | Published 2024-12-18 | Updated 2024-12-18 | Assigner NICWE-502 Deserialization of Untrusted Data
kimiya working with Trend Micro Zero Day Initiative
knowledge.ni.com/...cleDetails?id=kA00Z000000kFD7SAM&l=en-US
Support options
