Cyber Risks · Cisco Talos

Vulnerability Spotlight: Code Execution Vulnerability in LabVIEW

Summary: Cisco Talos disclosed a code execution vulnerability in LabVIEW 2016 version 16.0, 64-bit version only, discovered by Cory Duplantis, with Snort rules 41370-41371 available. Talos noted that organizations using such software to control physical systems should consider that attackers can exploit control software to reach those physical systems, and that proprietary file formats do not protect against vulnerabilities.

Bottom line: The affected software controls physical systems, so exploitation is not confined to a desktop - and the source's point that proprietary file formats offer no protection means an unpublished format is not a control you can count on.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related