CVE-2024-6675

CVSS V2 None CVSS V3 None
Description
A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects VeriStand 2024 Q2 and prior versions.
Overview
  • CVE ID
  • CVE-2024-6675
  • Assigner
  • NI
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-07-22T20:01:15.981Z
  • Last Modified Date
  • 2024-07-22T20:01:15.981Z
Weakness Enumerations
CWE URL
CWE-502 http://cwe.mitre.org/data/definitions/502.html
References
Reference URL Reference Tags
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-veristand-project-file.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-6675
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6675
History
Created Old Value New Value Data Type Notes
2024-07-23 13:12:33 Added to TrackCVE