Buffer overflow in Microsoft Windows
CVE-2023-4601
A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and all previous versions.
Vulnerability class: Buffer Overflow
EPSS: 0.006 (46.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Microsoft Windows
- Ni System Configuration — versions 0
- Ni System_configuration — versions 2023
Weakness classification (CWE)
References
- security@ni.com (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-4601?
- CVE-2023-4601 is a high-severity vulnerability in Microsoft Windows, classified under Stack-based Buffer Overflow. CVSS score: 8.1/10. Published 2023-10-18.
- How severe is CVE-2023-4601?
- High severity. CVSS v3 base score is 8.1 out of 10.