ZDI-24-213: NI FlexLogger userservices Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-1155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-213?
The severity of ZDI-24-213 is rated at 7.8 on the CVSS scale, indicating high severity.
How do I fix ZDI-24-213?
To fix ZDI-24-213, it is recommended to apply the latest patches and updates provided by National Instruments for NI FlexLogger.
Who is affected by ZDI-24-213?
ZDI-24-213 affects installations of NI FlexLogger that are vulnerable to local privilege escalation.
Can ZDI-24-213 be exploited remotely?
No, ZDI-24-213 requires local access to execute low-privileged code before exploitation can occur.
What type of vulnerability is ZDI-24-213?
ZDI-24-213 is a local privilege escalation vulnerability that allows attackers to gain higher privileges on the affected system.