Approved changes feed: RSS · Atom

cpe:2.3:a:ni:veristand:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNi (3f63e577-22ce-50bf-a016-4ac0c05111ef)
ProductVeristand (a19e0cce-9956-5b45-b5ad-16e216215ab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6806 vulnerable 2026-06-08 06:58:20.512761 Missing Authorization Checks In NI VeriStand Gateway For Project Resources
CRITICAL (9.8)
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T21:03:16.156Z
Updated: 2024-08-01T21:45:38.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6805 vulnerable 2026-06-08 06:58:20.512325 Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
HIGH (7.5)
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T21:00:21.584Z
Updated: 2024-08-01T21:45:38.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6794 vulnerable 2026-06-08 06:58:20.481844 Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server
CRITICAL (9.8)
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T20:50:40.727Z
Updated: 2024-08-01T21:45:37.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6793 vulnerable 2026-06-08 06:58:20.481211 Deserialization of Untrusted Data in NI VeriStand DataLogging Server
CRITICAL (9.8)
A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T20:47:52.793Z
Updated: 2024-08-01T21:45:37.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6791 vulnerable 2026-06-08 06:58:20.477735 Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files
HIGH (7.8)
A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T20:38:14.144Z
Updated: 2024-08-01T21:45:38.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6675 vulnerable 2026-06-08 06:58:20.159257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5136 vulnerable 2026-06-08 06:19:42.540948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.