Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-6794 EUVD-2024-47823GHSA-9f65-vvw4-5hh3

Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server

Published Jul 22, 2024 · Updated Nov 11, 2026 · Assigned by NI

Description

A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.

Affected products

VendorProductAffectedFixed
NI VeriStand < 24.5.0 24.5.0

References