CVE-2024-6805CWE-862

Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources

High · published July 22, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00954 · 61.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-07-22T21:00Z
EPSS history
Timeline
  • 22 JUL 21:00Z
    Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
    cvelistv5