CVE-2024-12741: Deserialization Of Untrusted Data Vulnerability In NI DAAQAExpress Project File
7.8
CVSS
Description
A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that DAQExpress is an EOL product and will not receive any updates.
Classification
CVE ID: CVE-2024-12741
CVSS Base Severity: HIGH
CVSS Base Score: 7.8
Affected Products
Vendor: NI
Product: DAQExpress
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.48% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)