Description
A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that DAQExpress is an EOL product and will not receive any updates.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | DAQExpress | ≤ 5.1.0 | — |