Vulnerability Description
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ni | Veristand | <= 2024 |
Related Weaknesses (CWE)
References
- https://www.ni.com/en/support/security/available-critical-and-security-updates-fVendor Advisory
- https://www.ni.com/en/support/security/available-critical-and-security-updates-fVendor Advisory
FAQ
What is CVE-2024-6794?
CVE-2024-6794 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a spe...
How severe is CVE-2024-6794?
CVE-2024-6794 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-6794?
Check the references section above for vendor advisories and patch information. Affected products include: Ni Veristand.