CVE-2024-6791

CVSS V2 None CVSS V3 None
Description
A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.
Overview
  • CVE ID
  • CVE-2024-6791
  • Assigner
  • NI
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-07-22T20:38:14.144Z
  • Last Modified Date
  • 2024-07-22T20:38:14.144Z
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
References
Reference URL Reference Tags
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-6791
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6791
History
Created Old Value New Value Data Type Notes
2024-07-23 13:11:36 Added to TrackCVE