ZDI-24-209: NI FlexLogger ServiceRegistry Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-1155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-209?
ZDI-24-209 has been assigned a CVSS rating of 7.8, indicating a high severity level.
How do I fix ZDI-24-209?
To mitigate ZDI-24-209, users should update their NI FlexLogger software to the latest version provided by National Instruments.
What types of systems are affected by ZDI-24-209?
ZDI-24-209 affects installations of NI FlexLogger where local attackers can escalate privileges.
Who can exploit ZDI-24-209?
Only local attackers who can execute low-privileged code on the target system can exploit the ZDI-24-209 vulnerability.
What consequences can ZDI-24-209 have if exploited?
Exploitation of ZDI-24-209 can lead to unauthorized privilege escalation on the affected system.