MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2024-6122

CVSS 5.5v3.1pub. 2024-07-22upd. 2024-11-21

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  • Ni Flexlogger

    APP
    Ni
    2023≤ 2023

  • Ni Systemlink

    APP
    Ni
    2024≤ 2024
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2025-2449HIGH8.8ten sam produkt

NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerabil...

CVE-2024-6121HIGH7.8ten sam produkt

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, ...

CVE-2023-5136MEDIUM5.5ten sam produkt

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure...

CVE-2022-27237MEDIUM6.1ten sam produkt

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI pr...

CVE-2026-48137CRITICAL9.3ten sam vendor

There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may ...