Skip to content
OpenAdvisories
High · 7.8 CVE-2024-6791 EUVD-2024-47820GHSA-g369-3j35-3453

Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files

Published Jul 22, 2024 · Updated Nov 11, 2026 · Assigned by NI

Description

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

Affected products

VendorProductAffectedFixed
NI VeriStand < 24.5.0 24.5.0

References