An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.
oryginał ENCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNi Measurementlink
APPNi1.0.0 – 1.1.1 (bez)
Powiązane podatności
There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present...
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may ...
RCE przez niebezpieczną deserializację w NI VeriStand DataLogging Server
Brak weryfikacji autoryzacji w NI VeriStand Gateway — RCE
RCE przez deserializację danych w NI VeriStand Waveform Streaming Server