CVE-2024-6805
HIGH
MEDIUM
Priority: 0.07
BB Relevance:
75/100
Published: 2024-07-22
Modified: 2026-11-11
First seen: 2026-11-11
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.
Weakness Classification (1)
Affected Software (3)
References & Advisories (1)
Vendor Advisory