NI G Web Development Software Deserialization Vulnerability Leading to Arbitrary Code Execution

A deserialization of untrusted data vulnerability has been identified in NI G Web Development Software, specifically in versions through 2022 Q3. This vulnerability may allow arbitrary code execution. Exploitation requires an attacker to persuade a user to open a specially crafted project file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to upgrade to NI G Web Development Software 2022 Q3 Patch 2 or later. The update can be obtained through the NI Package Manager or the NI Software Downloads page.