CVE-2024-6806: Missing Authorization Checks In NI VeriStand Gateway For Project Resources
Published Jul 22, 2024
·Updated
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Affected Software
2 affected components
NI VeriStand<=2024
NI VeriStand=2024-q2
Event History
Jul 22, 2024
CVE Published
via MITRE·09:03 PM
Data Sourced
via MITRE·09:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Jun 9, 56622
Event
via FIRST·11:37 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-6806?
CVE-2024-6806 is a critical vulnerability due to missing authorization checks that could allow for remote code execution.
2
How do I fix CVE-2024-6806?
To fix CVE-2024-6806, users should update to the latest version of NI VeriStand that addresses this vulnerability.
3
Which versions of NI VeriStand are affected by CVE-2024-6806?
CVE-2024-6806 affects NI VeriStand 2024 Q2 and all prior versions.
4
What type of vulnerability is CVE-2024-6806?
CVE-2024-6806 is characterized as a remote code execution vulnerability due to insufficient authorization checks.
5
Can CVE-2024-6806 be exploited remotely?
Yes, CVE-2024-6806 can be exploited remotely if the actor has access to the vulnerable NI VeriStand Gateway.