CVE-2024-6793

Name of the Vulnerable Software and Affected Versions NI VeriStand versions prior to 2024 Q2

Description A deserialization of untrusted data issue exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message.

Recommendations For versions prior to 2024 Q2, update to a version newer than 2024 Q2 to resolve the issue. As a temporary workaround, consider restricting access to the DataLogging Server to minimize the risk of exploitation.