Vulnerabilidades do Ni Instrumentstudio

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ni Instrumentstudio: 7 registro(s), com versões afetadas e correções.
cpe:2.3:a:ni:instrumentstudio

CVE-2026-9143 Média · 5.3 CWE-681 19/06/2026

Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

CVE-2026-9142 Crítica · 9.1 CWE-306 19/06/2026

NI grpc-device: credenciais padrão inseguras sem TLS no servidor

Existe uma vulnerabilidade de credenciais padrão inseguras no NI grpc-device quando a configuração TLS não está presente e o servidor está vinculado além do loopback. Isso pode permitir que um usuário não autenticado acesse o servidor na rede local. Afeta o NI grpc-device 2.17.0 e versões anteriores.

CVE-2026-48141 Alta · 7.5 CWE-401 19/06/2026

Memory leak in NI grpc-device BeginSidebandStream

There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI grpc-device 2.17.0 and prior versions.

CVE-2026-48140 Média · 6.5 CWE-704 19/06/2026

Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream

There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message containing an out-of-range value. This affects NI grpc-device 2.17.0 and prior versions.

CVE-2026-48139 Alta · 7.5 CWE-476 19/06/2026

NULL pointer dereference vulnerability in NI grpc-device data moniker service

There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash. Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions.

CVE-2026-48138 Alta · 7.5 CWE-125 19/06/2026

Out-of-bounds read vulnerability in the NI grpc-device streaming API

There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.

CVE-2026-48137 Crítica · 9.8 CWE-822 19/06/2026

NI grpc-device: desreferência de ponteiro não confiável (CVE-2026-48137)

Há uma vulnerabilidade de desreferência de ponteiro não confiável na API de streaming sideband do NI grpc-device que pode permitir que um atacante cause uma desreferência arbitrária de memória, potencialmente resultando em execução remota de código. A exploração bem-sucedida requer que o atacante forneça uma mensagem protobuf Moniker especialmente elaborada. Isso afeta o NI grpc-device 2.17.0 e versões anteriores.