CVE-2024-6122: medium-severity vulnerability in NI SystemLink Server
Incorrect Default Directory Permissions for NI SystemLink Redis Service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.2%
An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Related CVEs — NI SystemLink Server
In the same product, most dangerous first.
CVE-2025-2449HIGHNI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution VulnerabilityEPSS 33.7%CVE-2024-4044HIGHDeserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudioEPSS 14.7%CVE-2024-1156HIGHCVE-2024-1156EPSS 0.4%CVE-2026-4129HIGHImproper Access Controls in NI SystemLinkEPSS 0.4%CVE-2024-1155HIGHIncorrect permissions for shared NI SystemLink Elixir based servicesEPSS 0.3%CVE-2024-6121HIGHNI SystemLink Server Ships Out of Date Redis VersionEPSS 0.3%