CVE-2013-5022 is an absolute path traversal vulnerability in the 3D Graph ActiveX control (cw3dgrph.ocx) affecting National Instruments LabWindows/CVI, LabVIEW, and other related products. This flaw allows remote attackers to create and execute arbitrary files by specifying a full pathname in the ExportStyle method, combined with malicious content in the Caption or FormatString properties. With a CVSS score of 10.0, this vulnerability is critical, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2012CPE matchmatch criteria | cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:* | ||
<= 2012CPE matchmatch criteria | cpe:2.3:a:ni:labwindows:*:*:*:*:*:*:*:* | ||
<= 2013CPE matchmatch criteria | cpe:2.3:a:ni:measurementstudio:*:*:*:*:*:*:*:* | ||
<= 2012CPE matchmatch criteria | cpe:2.3:a:ni:teststand:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.