CVE-2024-6121

CVE-2024-6121 involves NI SystemLink Server shipping an outdated Redis version (affecting NI SystemLink Server 2024 Q1 and earlier; NI FlexLogger 2023 Q2 and earlier). Connected sources confirm CVE-2022-24834 and other Redis flaws; the security issue arises from Lua scripting in Redis, leading to...

CVE-2022-27237

CVE-2022-27237 describes a cross-site scripting (XSS) vulnerability in an NI Web Server component used with several NI products. The advisory indicates the affected surface is the NI Web Server component across multiple NI product deployments, with remediation guidance requiring upgrading to one ...

CVE-2024-6122

CVE-2024-6122 describes an incorrect installation-directory permission in the shared NI SystemLink Server KeyValueDatabase service that may allow local information disclosure. Affected: NI SystemLink Server versions prior to 2024 Q1 and NI FlexLogger prior to 2023 Q2 (those that installed the sha...