CVE-2024-12742: Deserialization of Untrusted Data Vulnerability in NI G Web Development Software

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-06 · updated 2026-06-17
Weakness: CWE-502

Description

A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted project file.  This vulnerability affects G Web Development Software 2022 Q3 and prior versions.

Affected products

NI G Web Development Software: through 22.3.1

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-g-web-deve.html

Get alerted when CVE-2024-12742 or the next vulnerability affects your stack