CVE-2022-27237

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 21-04-2022 07:15

Last modified: - 03-05-2022 05:40

Total changes: - 2

Description

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

Low

Integrity

None

Privileges required

Changed

Scope

Required

User interaction

6.1

Base score

2.8

2.7

Exploitability score

Impact score

Verification logic

vendor=ni AND product=flexlogger AND version=2021 AND update=r2

vendor=ni AND product=flexlogger AND version=2021 AND update=r3

vendor=ni AND product=flexlogger AND version=2021 AND update=r4

vendor=ni AND product=g_web_development_software AND version=2021 AND software_edition=-

vendor=ni AND product=g_web_development_software AND version=2021 AND software_edition=community

vendor=ni AND product=labview AND version=2021 AND update=- AND software_edition=-

vendor=ni AND product=labview AND version=2021 AND update=- AND software_edition=community

vendor=ni AND product=static_test_software_suite AND versionEndExcluding=1.2

vendor=ni AND product=systemlink AND version=2020 AND update=r4

vendor=ni AND product=systemlink AND version=2022 AND update=r1

vendor=ni AND product=systemlink AND version=2022 AND update=r2

Reference

https://www.ni.com/en-us/support/documentation/supplemental/22/cross-site-scripting-vulnerability--in-ni-web-server-component.html

Keywords

CVE-2022-27237

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-27237

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures