Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-2629
Analyzed
More InfoOfficial Page
Source-security@ni.com
View Known Exploited Vulnerability (KEV) details
Published At-09 Apr, 2025 | 19:15
Updated At-18 Aug, 2025 | 19:47

There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW when loading NI Error Reporting. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.07.0HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary3.17.3HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Primary3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CPE Matches

ni
ni
>>labview>>Versions up to 2021(inclusive)
cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*
ni
ni
>>labview>>2022
cpe:2.3:a:ni:labview:2022:q1:*:*:*:*:*:*
ni
ni
>>labview>>2022
cpe:2.3:a:ni:labview:2022:q3:*:*:*:*:*:*
ni
ni
>>labview>>2022
cpe:2.3:a:ni:labview:2022:q3_patch1:*:*:*:*:*:*
ni
ni
>>labview>>2022
cpe:2.3:a:ni:labview:2022:q3_patch2:*:*:*:*:*:*
ni
ni
>>labview>>2022
cpe:2.3:a:ni:labview:2022:q3_patch4:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q1:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q3:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q3_patch1:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q3_patch2:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q3_patch3:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q3_patch4:*:*:*:*:*:*
ni
ni
>>labview>>2023
cpe:2.3:a:ni:labview:2023:q3_patch5:*:*:*:*:*:*
ni
ni
>>labview>>2024
cpe:2.3:a:ni:labview:2024:q1:*:*:*:*:*:*
ni
ni
>>labview>>2024
cpe:2.3:a:ni:labview:2024:q1_patch1:*:*:*:*:*:*
ni
ni
>>labview>>2024
cpe:2.3:a:ni:labview:2024:q3:*:*:*:*:*:*
ni
ni
>>labview>>2024
cpe:2.3:a:ni:labview:2024:q3_patch1:*:*:*:*:*:*
ni
ni
>>labview>>2024
cpe:2.3:a:ni:labview:2024:q3_patch2:*:*:*:*:*:*
ni
ni
>>labview>>2025
cpe:2.3:a:ni:labview:2025:q1:*:*:*:*:*:*
ni
ni
>>labview>>2025
cpe:2.3:a:ni:labview:2025:q1_patch1:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-427Secondarysecurity@ni.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/dll-hijacking-vulnerability-in-ni-labview-when-loading-ni-error-reporting.htmlsecurity@ni.com
Vendor Advisory
Change History
0Changes found

Details not found