CVE-2024-6794: falha crítica em NI VeriStand
Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.2%
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
NI · VeriStandCVEs relacionadas — NI VeriStand
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6793CRITICALDeserialization of Untrusted Data in NI VeriStand DataLogging ServerEPSS 1.2%CVE-2024-6806CRITICALMissing Authorization Checks In NI VeriStand Gateway For Project ResourcesEPSS 1.0%CVE-2024-6805HIGHMissing Authorization Checks in NI VeriStand Gateway for File Transfer ResourcesEPSS 1.0%CVE-2024-6791HIGHDirectory Path Traversal Vulnerability in NI VeriStand with vsmodel FilesEPSS 0.5%CVE-2024-6675HIGHDeserialization of Untrusted Data Vulnerability in NI VeriStand Project FileEPSS 0.4%CVE-2023-5136MEDIUMIncorrect Permission Assignment in the TopoGrafix DataPlugin for GPXEPSS 0.3%