ZDI-24-211: NI FlexLogger DocumentManager Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-1155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-211?
The severity of ZDI-24-211 is rated at 7.8, indicating a high risk of privilege escalation.
How do I fix ZDI-24-211?
To fix ZDI-24-211, ensure you update to the latest version of NI FlexLogger that includes the security patch.
Who is affected by ZDI-24-211?
ZDI-24-211 affects installations of NI FlexLogger that allow low-privileged code execution.
What type of vulnerability is ZDI-24-211?
ZDI-24-211 is a privilege escalation vulnerability that could allow local attackers to gain higher-level access.
What must an attacker do to exploit ZDI-24-211?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-24-211.