NI System Web Server Relative Path Traversal Vulnerability Allowing Information Disclosure

A relative path traversal vulnerability has been identified in the NI System Web Server, present in versions through 2012. This vulnerability allows an attacker to send a specially crafted request that can read arbitrary files, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files, allowing for information disclosure.

Remediation

Users are advised to upgrade to NI System Web Server 2013 or later. For LabVIEW users, the upgrade can be done through the NI Package Manager or by downloading the latest version from the NI Software Downloads page.