Description
Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Digilent | WaveForms | ≤ 3.24.3 | — |