Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-5136 EUVD-2023-57474GHSA-mjm5-8p7x-r4cv

Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX

Published Nov 8, 2023 · Updated Jun 11, 2025 · Assigned by NI

Description

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.

Affected products

VendorProductAffectedFixed
NI TopoGrafix DataPlugin for GPX < 2023 Q4 2023 Q4
NI DIAdem < 2023 Q2 2023 Q2
NI VeriStand ≤ 2023 Q4 —
NI FlexLogger ≤ 2023 Q4 —

References