CVE-2024-6121CWE-1395

NI SystemLink Server Ships Out of Date Redis Version

High · published July 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Weakness
CWE-1395 · Dependency on Vulnerable Third-Party Component
Published
2024-07-22T19:46Z
EPSS history
Timeline
  • 22 JUL 19:46Z
    NI SystemLink Server Ships Out of Date Redis Version
    cvelistv5