ZDI-CAN-21773: ZDI-24-213: NI FlexLogger userservices Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-1155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21773?
The vulnerability ZDI-CAN-21773 has been assigned a CVSS rating of 7.8, indicating high severity.
How do I fix ZDI-CAN-21773?
To mitigate ZDI-CAN-21773, update to the latest version of NI FlexLogger that addresses this privilege escalation vulnerability.
What type of attack does ZDI-CAN-21773 involve?
ZDI-CAN-21773 involves local privilege escalation attacks that require low-privileged code execution on the target system.
Who is affected by ZDI-CAN-21773?
Users of NI FlexLogger are affected by the ZDI-CAN-21773 vulnerability if they have not applied the necessary security updates.
What are the potential risks of ZDI-CAN-21773?
Exploitation of ZDI-CAN-21773 can allow an attacker to escalate their privileges and gain unauthorized access to system resources.