Lucene search

NICVE-2024-6791

HistoryJul 22, 2024 - 9:15 p.m.

CVE-2024-6791

2024-07-2221:15:04

CWE-22

web.nvd.nist.gov

directory traversal

veristand

remote code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.0%

JSON

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

Affected configurations

Nvd

Node

niveristandRange≤2024

niveristandMatch2024q2

VendorProductVersionCPE
niveristand*cpe:2.3:a:ni:veristand:*:*:*:*:*:*:*:*
niveristand2024cpe:2.3:a:ni:veristand:2024:q2:*:*:*:*:*:*

Vendor	Product	Version	CPE
ni	veristand	*	cpe:2.3:a:ni:veristand::::::::
ni	veristand	2024	cpe:2.3:a:ni:veristand:2024:q2::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "VeriStand",
    "vendor": "NI",
    "versions": [
      {
        "lessThanOrEqual": "24.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.0%

JSON

Related for CVE-2024-6791