CVE-2024-6791

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
NI	VeriStand	< 24.5.0
ni	veristand	<= 24.2

References

Timeline

Published: Jul 22, 2024
Last modified: Nov 11, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-67923.5The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.CVE-2024-67939.8A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Succ CVE-2024-67949.8A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution CVE-2024-67959.8In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attack CVE-2024-67969.1In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauth CVE-2024-67974.8The DL Robots.txt WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users suc CVE-2024-67984.8The DL Verification WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users s CVE-2024-67994.3The YITH Essential Kit for WooCommerce #1 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit CVE-2024-68009.8An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity CVE-2024-68019.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects CVE-2024-68029.8A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unk CVE-2024-68039.8A vulnerability has been found in itsourcecode Document Management System 1.0 and classified as critical. Affected by this vulnerability is