CVE-2023-5136

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@ni.com

Published

2023-11-08

Last modified

2025-06-11

Weaknesses

CWE-611, CWE-732

Affected products

• Diadem (Ni)
• Flexlogger (Ni)
• Topografix Data Plugin (Ni)
• Topografix Dataplugin For Gpx (Ni)
• Veristand (Ni)

References

• https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignment-in-the-topografix-dataplug-…