Stack-based buffer overflow in I/O TRACE - CVE-2024-5602

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote unauthenticated attacker can trick a victim to open a specially crafted nitrace file, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2024-5602

External References

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/stack-based-buffer-overflow-vulnerability-in-ni-io-trace-tool.html
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-01

Related Security Bulletins

• Stack-based buffer overflow in National Instruments I/O TRACE