CVE-2023-5136 — Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX

Description (CNA)

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.

Affected (CNA)

Vendor / product	Versions
NI / TopoGrafix DataPlugin for GPX	affected 0 before 2023 Q4
NI / DIAdem	affected 0 before 2023 Q2
NI / VeriStand	affected 0 through 2023 Q4
NI / FlexLogger	affected 0 through 2023 Q4

CWE

CWE-611

References

https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignment-in-the-topografix-dataplug-for-gpx.html

ADP enrichment

CVE

No English description supplied.

https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignment-in-the-topografix-dataplug-for-gpx.html

CISA-ADP

No English description supplied.

No references supplied.