Veristand

veristand

Vendor: Ni • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-6806 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior version...Show more The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6805 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI Ver...Show more The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6794 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted messa...Show more A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6793 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. T...Show more A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.Show less
CVE-2024-6791 1Ni 1Veristand Jun 17, 2026 Jul 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafte...Show more A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.Show less
CVE-2023-5136 1Ni 4Diadem FlexloggerTopografix Data Plugin+1 more Jun 17, 2026 Nov 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.