CVE-2024-1155

🗓️ 20 Feb 2024 14:34:08Reported by NIType

Incorrect permissions in SystemLink Elixir installation directories may allow privileged escalation via local access

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-1155	20 Feb 202416:37	–	circl
CNNVD	SystemLink Server Security Vulnerability	20 Feb 202400:00	–	cnnvd
Cvelist	CVE-2024-1155 Incorrect permissions for shared NI SystemLink Elixir based services	20 Feb 202414:34	–	cvelist
EUVD	EUVD-2024-16924	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1155	20 Feb 202415:15	–	nvd
OSV	CVE-2024-1155	20 Feb 202415:15	–	osv
Prion	Privilege escalation	20 Feb 202415:15	–	prion
RedhatCVE	CVE-2024-1155	5 Feb 202505:19	–	redhatcve
Vulnrichment	CVE-2024-1155 Incorrect permissions for shared NI SystemLink Elixir based services	20 Feb 202414:34	–	vulnrichment
Zero Day Initiative	NI FlexLogger ServiceRegistry Missing Authorization Local Privilege Escalation Vulnerability	28 Feb 202400:00	–	zdi

NVD

Node

emerson data_record_adRange≤2.0.1

emerson flexloggerRange≤2022_q3

emerson g_web_development_softwareRange≤2022_q3

emerson labview_nxgMatch5.1community

emerson labview_nxgMatch5.1real-time_module

emerson labview_nxgMatch5.1web_module

emerson specification_compliance_managerRange≤2023_q4

emerson static_test_software_suiteRange≤1.2

emerson sts_software_bundleRange≤21.0

emerson systemlink_serverRange<2024_q1

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "SystemLink Server",
    "vendor": "NI",
    "versions": [
      {
        "lessThanOrEqual": "2023 Q3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "FlexLogger",
    "vendor": "NI",
    "versions": [
      {
        "lessThanOrEqual": "2022 Q3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
ni	www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html

12 Feb 2025 18:50Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8

EPSS0.00083

SSVC