CVE-2025-2630
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
29/100
Published: 2025-04-09
Modified: 2026-11-11
First seen: 2026-11-11
Status: active
Attack Surface
Low Complexity
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Passive
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.
Weakness Classification (1)
Affected Software (24)
| Vendor | Product | Version |
|---|---|---|
| NI | LabVIEW | 0 < 22.3.4 |
| NI | LabVIEW | 23.1.0 < 23.3.5 |
| NI | LabVIEW | 24.1.0 < 24.3.2 |
| NI | LabVIEW | 25.1.0 < 25.1.1 |
| ni | labview | < 2021 |
| ni | labview | 2022 |
| ni | labview | 2022 |
| ni | labview | 2022 |
| ni | labview | 2022 |
| ni | labview | 2022 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2025 |
| ni | labview | 2025 |