VULN/vuln-cve
1
0
Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-11T15:45:26Z

Browse Source
This commit is contained in:
Vulnerability Bot
2026-11-11 16:45:32 +01:00
parent 629b6d7aad
commit 6b4b3fcc10
72 changed files with 5426 additions and 674 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data/2023/4xxx/CVE-2023-4570.json
+65 -65
View File
@@ -1,6 +1,6 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2023-4570",
"assignerOrgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
@@ -8,41 +8,28 @@
"assignerShortName": "NI",
"dateReserved": "2023-08-28T19:32:41.324Z",
"datePublished": "2023-10-05T15:26:45.467Z",
"dateUpdated": "2024-09-19T18:53:34.207Z"
"dateUpdated": "2026-11-11T14:39:48.025Z"
},
"containers": {
"cna": {
"affected": [
"providerMetadata": {
"orgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
"shortName": "NI",
"dateUpdated": "2026-11-11T14:39:48.025Z"
},
"title": "Improper Restriction in NI MeasurementLink Python Services",
"problemTypes": [
{
"defaultStatus": "unaffected",
"modules": [
"Python Services"
],
"product": "MeasurementLink ",
"vendor": "NI",
"versions": [
"descriptions": [
{
"lessThanOrEqual": "1.1.0",
"status": "affected",
"version": "1.0.0",
"versionType": "1.1.1"
"lang": "en",
"cweId": "CWE-420",
"description": "CWE-420 Unprotected Alternate Channel",
"type": "CWE"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "<span style=\"background-color: rgb(255, 255, 255);\">An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the </span><span style=\"background-color: rgb(255, 255, 255);\">ni-measurementlink-service</span><span style=\"background-color: rgb(255, 255, 255);\">&nbsp;Python package and all previous versions.</span><br>"
}
],
"value": "An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.\n"
}
],
"impacts": [
{
"capecId": "CAPEC-1",
@@ -54,57 +41,70 @@
]
}
],
"affected": [
{
"vendor": "NI",
"product": "MeasurementLink",
"modules": [
"Python Services"
],
"versions": [
{
"status": "affected",
"version": "1.0.0",
"lessThanOrEqual": "1.1.0",
"versionType": "1.1.1"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 and all previous versions of the ni-measurementlink-service Python package.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<span>An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0&nbsp;</span>and all previous versions&nbsp;<span>of the </span><span>ni-measurementlink-service</span><span>&nbsp;Python package.</span><br>"
}
]
}
],
"references": [
{
"url": "https://www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-420",
"description": "CWE-420 Unprotected Alternate Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
"shortName": "NI",
"dateUpdated": "2023-10-05T15:26:45.467Z"
},
"references": [
{
"url": "https://www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html"
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseSeverity": "HIGH",
"baseScore": 8.8,
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Improper Restriction in NI MeasurementLink Python Services",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}