CVE-2024-6794

CVSS V2 None CVSS V3 None
Description
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
Overview
  • CVE ID
  • CVE-2024-6794
  • Assigner
  • NI
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-07-22T20:50:40.727Z
  • Last Modified Date
  • 2024-07-22T20:50:40.727Z
Weakness Enumerations
CWE URL
CWE-502 http://cwe.mitre.org/data/definitions/502.html
References
Reference URL Reference Tags
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-6794
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6794
History
Created Old Value New Value Data Type Notes
2024-07-23 13:11:36 Added to TrackCVE