Vulnerability Description
An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ni | Measurementlink | >= 1.0.0, < 1.1.1 |
Related Weaknesses (CWE)
References
- https://www.ni.com/en/support/documentation/supplemental/23/improper-restrictionVendor Advisory
- https://www.ni.com/en/support/documentation/supplemental/23/improper-restrictionVendor Advisory
FAQ
What is CVE-2023-4570?
CVE-2023-4570 is a vulnerability with a CVSS score of 8.8 (HIGH). An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to b...
How severe is CVE-2023-4570?
CVE-2023-4570 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-4570?
Check the references section above for vendor advisories and patch information. Affected products include: Ni Measurementlink.