CVE-2024-6675

Name of the Vulnerable Software and Affected Versions NI VeriStand versions prior to 2024 Q2

Description A deserialization of untrusted data issue exists, potentially leading to remote code execution. Successful exploitation requires an attacker to trick a user into opening a specially crafted project file.

Recommendations For versions prior to 2024 Q2, avoid opening project files from untrusted sources until a fix is available. As a temporary workaround, consider restricting access to project files to minimize the risk of exploitation.