GCVE - cpe:2.3:a:ni:veristand:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ni:veristand:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ni (`3f63e577-22ce-50bf-a016-4ac0c05111ef`)
Product	Veristand (`a19e0cce-9956-5b45-b5ad-16e216215ab5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-6806`	vulnerable	2026-06-03 14:58:04.210609	Missing Authorization Checks In NI VeriStand Gateway For Project Resources CRITICAL (9.8) The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions. Published: 2024-07-22T21:03:16.156Z Updated: 2024-08-01T21:45:38.240Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6805`	vulnerable	2026-06-03 14:58:04.210127	Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources HIGH (7.5) The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions. Published: 2024-07-22T21:00:21.584Z Updated: 2024-08-01T21:45:38.363Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6794`	vulnerable	2026-06-03 14:58:04.180695	Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server CRITICAL (9.8) A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions. Published: 2024-07-22T20:50:40.727Z Updated: 2024-08-01T21:45:37.947Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6793`	vulnerable	2026-06-03 14:58:04.180284	Deserialization of Untrusted Data in NI VeriStand DataLogging Server CRITICAL (9.8) A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions. Published: 2024-07-22T20:47:52.793Z Updated: 2024-08-01T21:45:37.783Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6791`	vulnerable	2026-06-03 14:58:04.176517	Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files HIGH (7.8) A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions. Published: 2024-07-22T20:38:14.144Z Updated: 2024-08-01T21:45:38.049Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6675`	vulnerable	2026-06-03 14:58:03.854849	Deserialization of Untrusted Data Vulnerability in NI VeriStand Project File HIGH (7.8) A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects VeriStand 2024 Q2 and prior versions. Published: 2024-07-22T20:01:15.981Z Updated: 2024-08-01T21:41:04.305Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-veristand-project-file.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5136`	vulnerable	2026-06-03 14:53:47.719946	Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX MEDIUM (5.5) An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file. Published: 2023-11-08T15:24:10.867Z Updated: 2025-06-11T14:34:24.037Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignment-in-the-topografix-dataplug-for-gpx.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.