01 Record

CVE-2013-5021

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.07% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 81.3% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2013-08-06 18:00Z13 YR AGO

Last updated

2024-08-06 16:59Z2 YR AGO

Reserved

2013-07-31

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Base

Data version

5.1

Document digest

6d0e313fdd5bd8edb57130c7963cf5057fe20da43bd22f27ffd0a7da7b9d8833

05 Affected products

VendorProductVersionsPlatforms

abbdatamanagerNot specified—

nilabviewNot specified—

nilabwindowsNot specified—

nimeasurementstudioNot specified—

niteststandNot specified—

06 References

www05.abb.comhttp://www05.abb.com/global/scot/scot203.nsf/veritydisplay/5975a8a86c82eec2c125798e00551522/%24file/SECURITY_BULLETIN_-_ABBVU-PACT-3BSE072617_DataManager_Vulnerability.pdfx_refsource_CONFIRM
zerodayinitiative.comhttp://zerodayinitiative.com/advisories/ZDI-13-120/x_refsource_MISC
digital.ni.comhttp://digital.ni.com/public.nsf/allkb/04B876608790082C86257BD1000CC950?OpenDocumentx_refsource_CONFIRM
digital.ni.comhttp://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocumentx_refsource_CONFIRM