Vulnerabilities > NI > Veristand

DATE CVE VULNERABILITY TITLE RISK
2024-07-22 CVE-2024-6791 Path Traversal vulnerability in NI Veristand
A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution.
local
low complexity
ni CWE-22
7.8
2024-07-22 CVE-2024-6793 Deserialization of Untrusted Data vulnerability in NI Veristand
A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution.
network
low complexity
ni CWE-502
critical
9.8
2024-07-22 CVE-2024-6794 Deserialization of Untrusted Data vulnerability in NI Veristand
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution.
network
low complexity
ni CWE-502
critical
9.8
2024-07-22 CVE-2024-6805 Missing Authorization vulnerability in NI Veristand
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources.
network
low complexity
ni CWE-862
critical
9.8
2024-07-22 CVE-2024-6806 Missing Authorization vulnerability in NI Veristand
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources.
network
low complexity
ni CWE-862
critical
9.8
2023-11-08 CVE-2023-5136 Incorrect Permission Assignment for Critical Resource vulnerability in NI products
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure.
local
low complexity
ni CWE-732
5.5