CVE-2023-4570

CVSS V2 None CVSS V3 None

Description

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.

Overview

CVE ID
CVE-2023-4570

Assigner
NI

Vulnerability Status
PUBLISHED

Published Version
2023-10-05T15:26:45.467Z

Last Modified Date
2023-10-05T15:26:45.467Z

Weakness Enumerations

CWE	URL
CWE-420	http://cwe.mitre.org/data/definitions/420.html

References

Reference URL	Reference Tags
https://www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-4570
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4570

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 19:15:30				Added to TrackCVE