NVD disclosure day
CVE-2024-6806
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The NI VeriStand Gateway has a vulnerability where it fails to check authorization for accessing Project resources. This could allow an unauthenticated actor to achieve remote code execution. Readers should ascertain if NI VeriStand is deployed, assess its network exposure, and determine relevance to critical systems.
CVE-2024-6805
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The NI VeriStand Gateway has a vulnerability where it lacks authorization checks for File Transfer resources, potentially allowing unauthorized actors to disclose information or execute remote code. This impacts NI VeriStand, and readers should care due to the potential for unauthorized access to systems.
CVE-2024-6794
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A deserialization vulnerability in NI VeriStand's Waveform Streaming Server allows remote code execution via a crafted network message, potentially impacting real-time testing and simulation environments.
CVE-2024-6793
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A deserialization vulnerability in NI VeriStand's DataLogging Server allows remote code execution if a specially crafted message is sent. This could lead to system compromise. It is important to confirm if this specialized software is in use within your environment.