Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-12741

Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File

Description

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions.  Please note that DAQExpress is an EOL product and will not receive any updates.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NI DAQExpress

Default version status: unaffected

  • 0affected

References