CVE-2013-5026
UnknownEPSS 3.59%
Last modified
CVE-2013-5026 is a vulnerability of currently unknown severity. An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.. EPSS estimates a 3.59% chance of exploitation in the next 30 days.
Description
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ni | Lookout | 6.5 |
| Ni | Lookout | 6.6 |
| Ni | Lookout | 6.7 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-5026?
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.
How severe is CVE-2013-5026?
Severity scoring for CVE-2013-5026 is pending analysis. The EPSS model estimates a 3.59% probability of exploitation in the next 30 days.
How do I fix CVE-2013-5026?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-5020Multiple cross-site scripting (XSS) vulnerabilities in bb_ad…
- CVE-2013-5021Multiple absolute path traversal vulnerabilities in National…
- CVE-2013-5022Absolute path traversal vulnerability in the 3D Graph Active…
- CVE-2013-5023The ActiveX controls in the HelpAsst component in NI Help Li…
- CVE-2013-5024An ActiveX control in NationalInstruments.Help2.dll in Natio…
- CVE-2013-5025An ActiveX control in exlauncher.dll in the Help subsystem i…
- CVE-2013-5027Collabtive 1.0 has incorrect access control9.8
- CVE-2013-5028SQL injection vulnerability in IT/hardware-list.dll in Kwoks…
- CVE-2013-5029phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attack…
- CVE-2013-5030Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.…
- CVE-2013-5031Unspecified vulnerability in Atmail before 6.6.4, and 7.x be…
- CVE-2013-5032Unspecified vulnerability in Atmail before 6.6.4, and 7.x be…
Are you affected by CVE-2013-5026?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST