CVE-2013-5022: Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instrumen...

Security readout for executives and security teams

This is a legacy National Instruments ActiveX issue that could let a remote attacker make affected Windows systems create and run files. It matters most where older LabVIEW or LabWindows/CVI components remain on engineering or lab workstations and can be reached through browser or ActiveX-capable content. Exposure is likely limited to systems with the vulnerable NI 3D Graph ActiveX control installed, especially legacy engineering, lab, or OT workstations running affected NI software. The source bundle does not enumerate the unspecified “other products,” so inventories should not stop at LabVIEW and LabWindows/CVI alone. Treat this as a high-priority legacy exposure review, not an internet-wide emergency. The business risk is highest where older NI tools support production, testing, or lab operations and cannot be quickly changed. No active exploitation evidence is provided in the source bundle. Mitigation focus: Review the linked National Instruments advisories for supported fixes or replacement guidance.; Update affected National Instruments software and controls where vendor guidance provides an update path.; Disable or restrict the vulnerable 3D Graph ActiveX control where business workflows allow..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.