CVE-2024-6791

Description

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

Affected Platforms

Weakness Type

CWE-22, CWE-22

References

• https://www.ni.com/en/support/security/available-critical-and-security-updates-f…
• https://www.ni.com/en/support/security/available-critical-and-security-updates-f…