← Vulnerability feed

Vulnerability record · CVE-2013-5022 · published 6 August 2013

CVE-2013-5022: Ni labview path traversal vulnerability

NNi · Labview

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

10.0 CVSS 2.0 High EPSS 2.6% · top 15.5% CWE-22 · Path traversal
10.0CVSS 2.0 base score
2.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://digital.ni.com/public.nsf/allkb/782E4F31442D833186257BD3004AEB47?OpenDocument
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument PatchVendor Advisory
http://digital.ni.com/public.nsf/websearch/C4619A438F7E78E486257B360050BD7D?OpenDocument Vendor Advisory
http://digital.ni.com/public.nsf/allkb/782E4F31442D833186257BD3004AEB47?OpenDocument
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument PatchVendor Advisory
http://digital.ni.com/public.nsf/websearch/C4619A438F7E78E486257B360050BD7D?OpenDocument Vendor Advisory

Track CVE-2013-5022 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2013-5021Ni labview path traversal vulnerabilityMultiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlie…EPSS 2.1%8.5CVE-2026-64201Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-64202Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-64203Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-64204Ni labview out-of-bounds write vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.19%8.5CVE-2026-16233Ni labview out-of-bounds write vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.13%8.5CVE-2026-16234Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  …EPSS 0.13%8.5CVE-2026-32863Ni labview out-of-bounds read vulnerabilityThere is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW.  This vulnerabil…EPSS 0.19%

Source: NIST National Vulnerability Database (record CVE-2013-5022), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.