Records116All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high93CVSS 7.0–8.9
Exploited now
NI records in CISA KEVNo NI vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 51
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01019 · Published 2024-07-22 · No fix listed CWE-862
Priority MEDIUM 51
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01152 · Published 2024-07-22 · No fix listed CWE-502
Priority MEDIUM 51
A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01193 · Published 2024-07-22 · No fix listed CWE-502
Priority MEDIUM 45
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00954 · Published 2024-07-22 · No fix listed CWE-862
Priority LOW 36
A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00458 · Published 2024-07-22 · No fix listed CWE-22
Priority LOW 24
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00253 · Published 2023-11-08 · Fixed in 2023 Q4, 2023 Q2 CWE-611
THREATIST.IORead the docs