ZDI-CAN-21939: ZDI-24-212: NI FlexLogger TagHistorian Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-1155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21939?
The severity of ZDI-CAN-21939 is rated at 7.8 according to CVSS.
How does ZDI-CAN-21939 allow privilege escalation?
ZDI-CAN-21939 allows privilege escalation as local attackers can exploit it after executing low-privileged code on the affected system.
Who is affected by ZDI-CAN-21939?
Users of National Instruments FlexLogger are affected by ZDI-CAN-21939.
What should I do to mitigate ZDI-CAN-21939?
To mitigate ZDI-CAN-21939, ensure you apply the latest patches provided by National Instruments for FlexLogger.
Can ZDI-CAN-21939 be exploited remotely?
No, ZDI-CAN-21939 requires local execution of low-privileged code to be exploited.