CVE-2024-23612: high-severity vulnerability in NI LabVIEW
Improper Error Handling Issue in LabVIEW
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
LabVIEW has a flaw in how it handles errors that could allow an attacker to run malicious code on your computer if you open a specially crafted file. This is serious because it bypasses normal security checks.
An improper error handling mechanism in LabVIEW allows remote code execution when a user opens a malicious VI (Virtual Instrument) file. The vulnerability exists in versions 2024 Q1 and earlier; exploitation requires user interaction to load the crafted VI, but once triggered, results in arbitrary code execution with user privileges.
In the same product, most dangerous first.