CVE-2024-6805: Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
Published Jul 22, 2024
·Updated
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Affected Software
2 affected components
NI VeriStand<=2024
NI VeriStand=2024-q2
Event History
Jul 22, 2024
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Jun 9, 56622
Event
via FIRST·11:44 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-6805?
CVE-2024-6805 has high severity due to the potential for information disclosure and remote code execution.
2
How do I fix CVE-2024-6805?
To fix CVE-2024-6805, update to the latest version of NI VeriStand beyond 2024 Q2.
3
What versions are affected by CVE-2024-6805?
CVE-2024-6805 affects NI VeriStand 2024 Q2 and all prior versions.
4
What are the potential risks of CVE-2024-6805?
The risks of CVE-2024-6805 include unauthorized access to File Transfer resources, leading to information disclosure or remote code execution.
5
Who is vulnerable to CVE-2024-6805?
Organizations using NI VeriStand versions 2024 Q2 and prior are vulnerable to CVE-2024-6805.