CVE-2024-12742CWE-502

Deserialization of Untrusted Data Vulnerability in NI G Web Development Software

High · published March 6, 2025

CVSS v4.0
8.4
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted project file.  This vulnerability affects G Web Development Software 2022 Q3 and prior versions.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N
EPSS
0.05535 · 92.8th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-03-06T16:27Z
EPSS history
Timeline
  • 06 MAR 16:27Z
    Deserialization of Untrusted Data Vulnerability in NI G Web Development Software
    cvelistv5