Using Labview? Unpatched Flaw Allows Hackers To Hijack Your Computer

If you're an engineer as well as job LabVIEW software to blueprint machines or industrial equipments, you lot should travel real suspicious piece opening whatsoever VI (virtual instrument) file.

LabVIEW, developed yesteryear American companionship National Instruments, is a visual programming linguistic communication as well as powerful system-design tool that is beingness used worldwide inwards hundreds of fields as well as provides engineers amongst a unproblematic surroundings to construct mensuration or command systems

Security researchers from Cisco's Talos Security Intelligence convey discovered a critical vulnerability inwards LabVIEW software that could permit attackers to execute malicious code on a target computer, giving them amount command of the system.

Identified every bit CVE-2017-2779, the code execution vulnerability could travel triggered yesteryear opening a especially crafted VI file, a proprietary file format used yesteryear LabVIEW.

The vulnerability originates because of retentiveness corruption number inwards the RSRC segment parsing functionality of LabVIEW.

Modulating the values inside the RSRC segment of a VI file causes a controlled looping condition, which results inwards an arbitrary nix write.

"A especially crafted LabVIEW virtual musical instrument file (with the *.vi extension) tin move movement an assailant controlled looping status resulting inwards an arbitrary nix write," Talos researchers explain. 

"An assailant controlled VI file tin move travel used to trigger this vulnerability as well as tin move potentially final result inwards code execution."

Talos researchers convey successfully tested the vulnerability on LabVIEW 2016 version 16.0, only National Instruments has refused to take in this number every bit a vulnerability inwards their production as well as had no plans to unloose whatsoever patch to address the flaw.

However, the number should non travel ignored, because the threat vector is almost like to many previously disclosed Microsoft Office vulnerabilities, inwards which victims got compromised later opening malicious MS Word file received via an electronic mail or downloaded from the Internet.

"The consequences of a successful compromise of a organization that interacts amongst the physical world, such every bit a information acquisition as well as command systems, may travel critical to safety," the researchers write. 

"Organisations that deploy such systems, fifty-fifty every bit airplane pilot projects, should travel aware of the opportunity posed yesteryear vulnerabilities such every bit these as well as adequately protect systems."

Since at that spot is no patch available, the LabVIEW users are left amongst solely i option—be real careful piece opening whatsoever VI file you lot have via an email.

For to a greater extent than technical details nigh the vulnerability, you lot tin move caput on to Cisco Talos' advisory.

Share This :