CVE-2024-6791 - Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files

Back Back to CVE browser

HIGH

Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files

Published Jul 22, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.46%

Description

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

Affected products

Vendor NI Product VeriStand Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=24.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

VeriStand

unaffected

Version	Status	Constraints
0	affected	<=24.2

Vendor NI Product Veristand Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=24.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Veristand

unaffected

Version	Status	Constraints
0	affected	<=24.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47820		Advisory
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html		Vendor Advisory