First published: Mon Jul 22 2024(Updated: )
An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
Credit: security@ni.com
Affected Software | Affected Version | How to fix |
---|---|---|
NI FlexLogger | <=2023 | |
NI FlexLogger | =2023-q2 | |
NI SystemLink | <=2024 | |
NI SystemLink | =2024-q1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-6121 has a critical severity rating due to the potential for multiple vulnerabilities impacting the software.
To fix CVE-2024-6121, update to the latest version of NI SystemLink Server or NI FlexLogger that addresses the vulnerabilities.
CVE-2024-6121 affects NI SystemLink Server 2024 Q1 and prior versions, as well as NI FlexLogger 2023 Q2 and prior versions.
CVE-2024-6121 includes multiple vulnerabilities, one of which is CVE-2022-24834.
As of now, there are no publicly available exploits reported for CVE-2024-6121, but it is still recommended to apply updates to mitigate risks.