CVE-2024-5602 is a stack-based buffer overflow vulnerability in the NI I/O Trace Tool, which is part of NI System Configuration utilities. This flaw, caused by a missing bounds check, could lead to arbitrary code execution if a user opens a specially crafted nitrace file. Rated 7.8 HIGH on CVSS, exploitation requires user interaction and local access, but successful attacks could result in high impact to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| NI | IO Trace Tool | >= 0, <= 24.3CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.