← Vulnerability feed

Vulnerability record · CVE-2013-5021 · published 6 August 2013

CVE-2013-5021: Ni labview path traversal vulnerability

NNi · Labview

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.

9.3 CVSS 2.0 High EPSS 2.1% · top 19.3% CWE-22 · Path traversal
9.3CVSS 2.0 base score
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://digital.ni.com/public.nsf/allkb/04B876608790082C86257BD1000CC950?OpenDocument
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
http://www05.abb.com/global/scot/scot203.nsf/veritydisplay/5975a8a86c82eec2c125798e00551522/%24file/SECURITY_BULLETIN_-_
http://zerodayinitiative.com/advisories/ZDI-13-120/
http://digital.ni.com/public.nsf/allkb/04B876608790082C86257BD1000CC950?OpenDocument
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
http://www05.abb.com/global/scot/scot203.nsf/veritydisplay/5975a8a86c82eec2c125798e00551522/%24file/SECURITY_BULLETIN_-_
http://zerodayinitiative.com/advisories/ZDI-13-120/

Track CVE-2013-5021 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-5022Ni labview path traversal vulnerabilityAbsolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, La…EPSS 2.6%8.5CVE-2026-64201Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-64202Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-64203Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-64204Ni labview out-of-bounds write vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-16233Ni labview out-of-bounds write vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.13%8.5CVE-2026-16234Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.13%8.5CVE-2026-32863Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW.  This vulnerabil…EPSS 0.19%

Source: NIST National Vulnerability Database (record CVE-2013-5021), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.