CVE-2024-12740
High
Description
Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.
SeverityHigh
CVSS7.8
Exploit probability—
ProductVision Development Module
PublishedJan 27, 2025
First seenJan 27, 2025
Weakness typeCWE-1395CWE-1395
How to fix
Update
- NI FlexRIO25.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| NI Vision Development Module | v ≤ 24.1 | — |
| NI FlexRIO | v < 25.0 | 25.0 |
| NI NI-IMAQdx | v ≤ 23.1 | — |
| NI Vision Acquisition Software | v ≤ 23.1 | — |
| NI Vision Builder for Automated Inspection | v ≤ 23.* | — |
| NI Data Record AD | v ≤ 2.0 | — |
| NI FRC Game Tools | v ≤ 25.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.