CVE-2023-4570

Summary

CVE-2023-4570 is a newly identified vulnerability affecting the NI MeasurementLink Python services. This issue arises due to an inadequate access restriction, permitting an attacker on an adjacent network to access services that were previously assumed to be inaccessible, as they were running on localhost. The affected services are found in measurement plug-ins written in Python, utilizing version 1.1.0 of the ni-measurementlink-service Python package and all its predecessors.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.