Is CVE-2023-4570 actively exploited?

No active exploitation of CVE-2023-4570 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-4570 be exploited remotely?

Partially. CVE-2023-4570 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2023-4570?

CVE-2023-4570 has a CVSS score of 8.8 (HIGH).

HOME VULNERABILITIESCVE-2023-4570

HIGH

CVE-2023-4570

CWE-420Published: October 5, 2023· Updated: Jun 17, 2026

8.8

CVSS v3.1

Official Description

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.

NVD Source

Technical Analysis

CVE-2023-4570 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.