Approved changes feed: RSS · Atom

cpe:2.3:a:ni:veristand:2024:q2:*:*:*:*:*:*

part: a version: 2024 update: q2

VendorNi (3f63e577-22ce-50bf-a016-4ac0c05111ef)
ProductVeristand (a19e0cce-9956-5b45-b5ad-16e216215ab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6806 vulnerable 2026-06-03 14:58:04.210764 Missing Authorization Checks In NI VeriStand Gateway For Project Resources
CRITICAL (9.8)
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T21:03:16.156Z
Updated: 2024-08-01T21:45:38.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6805 vulnerable 2026-06-03 14:58:04.210189 Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
HIGH (7.5)
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T21:00:21.584Z
Updated: 2024-08-01T21:45:38.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6794 vulnerable 2026-06-03 14:58:04.180729 Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server
CRITICAL (9.8)
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T20:50:40.727Z
Updated: 2024-08-01T21:45:37.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6793 vulnerable 2026-06-03 14:58:04.180322 Deserialization of Untrusted Data in NI VeriStand DataLogging Server
CRITICAL (9.8)
A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T20:47:52.793Z
Updated: 2024-08-01T21:45:37.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6791 vulnerable 2026-06-03 14:58:04.178561 Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files
HIGH (7.8)
A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.
Published: 2024-07-22T20:38:14.144Z
Updated: 2024-08-01T21:45:38.049Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.