Vulnerabilities > NI > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-07-22 CVE-2024-6793 Deserialization of Untrusted Data vulnerability in NI Veristand
A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution.
network
low complexity
ni CWE-502
critical
9.8
2024-07-22 CVE-2024-6794 Deserialization of Untrusted Data vulnerability in NI Veristand
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution.
network
low complexity
ni CWE-502
critical
9.8
2024-07-22 CVE-2024-6805 Missing Authorization vulnerability in NI Veristand
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources.
network
low complexity
ni CWE-862
critical
9.8
2024-07-22 CVE-2024-6806 Missing Authorization vulnerability in NI Veristand
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources.
network
low complexity
ni CWE-862
critical
9.8
2023-10-18 CVE-2023-4601 Out-of-bounds Write vulnerability in NI System Configuration
A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution.
network
low complexity
ni CWE-787
critical
9.8