CVE-2024-6794: Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server
Published Jul 22, 2024
·Updated
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
Affected Software
2 affected components
NI VeriStand<=2024
NI VeriStand=2024-q2
Event History
Jul 22, 2024
CVE Published
via MITRE·08:50 PM
Data Sourced
via MITRE·08:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Jun 9, 56622
Event
via FIRST·11:44 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-6794?
The severity of CVE-2024-6794 is classified as critical due to its potential for remote code execution.
2
How do I fix CVE-2024-6794?
To fix CVE-2024-6794, update NI VeriStand to version 2024 Q3 or later, which addresses the vulnerability.
3
What software is affected by CVE-2024-6794?
CVE-2024-6794 affects NI VeriStand versions up to and including 2024 Q2.
4
What type of vulnerability is CVE-2024-6794?
CVE-2024-6794 is a deserialization of untrusted data vulnerability.
5
What are the potential consequences of exploiting CVE-2024-6794?
Exploiting CVE-2024-6794 may allow an attacker to execute arbitrary code remotely on the affected system.