← CVE Intelligence

CVE-2024-12741

Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File PUBLISHED

Description (CNA)

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions.  Please note that DAQExpress is an EOL product and will not receive any updates.

Affected (CNA)

Vendor / productVersions
NI / DAQExpressaffected 0

CWE

CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.