CVE-2024-6805: high-severity vulnerability in NI VeriStand
Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 1.0%
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
NI · VeriStandRelated CVEs — NI VeriStand
In the same product, most dangerous first.
CVE-2024-6793CRITICALDeserialization of Untrusted Data in NI VeriStand DataLogging ServerEPSS 1.2%CVE-2024-6794CRITICALDeserialization of Untrusted Data in NI VeriStand Waveform Streaming ServerEPSS 1.2%CVE-2024-6806CRITICALMissing Authorization Checks In NI VeriStand Gateway For Project ResourcesEPSS 1.0%CVE-2024-6791HIGHDirectory Path Traversal Vulnerability in NI VeriStand with vsmodel FilesEPSS 0.5%CVE-2024-6675HIGHDeserialization of Untrusted Data Vulnerability in NI VeriStand Project FileEPSS 0.4%CVE-2023-5136MEDIUMIncorrect Permission Assignment in the TopoGrafix DataPlugin for GPXEPSS 0.3%