SB20240819161 - Multiple vulnerabilities in NI VeriStand
Published: August 19, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 8 secuirty vulnerabilities.
1) Deserialization of Untrusted Data (CVE-ID: CVE-2024-6675)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data. A remote attacker can trick a victim to open a specially crafted NIVSPRJ file and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Exposed dangerous method or function (CVE-ID: CVE-2024-6805)
The vulnerability allows a remote attacker to compromise the system.
The vulnerability exists due to exposed dangerous method or function within the processing of service requests in the ProjectServer component. A remote attacker can perform a denial of service (DoS) attack.
3) Exposed dangerous method or function (CVE-ID: CVE-2024-6805)
The vulnerability allows a remote attacker to compromise the system.
The vulnerability exists due to exposed dangerous method or function within the IFileTransferServer component. A remote attacker can disclose information in the context of the current user.
4) Exposed dangerous method or function (CVE-ID: CVE-2024-6806)
The vulnerability allows a remote attacker to compromise the system.
The vulnerability exists due to exposed dangerous method or function within the processing of service requests in the ProjectServer component. A remote attacker can execute arbitrary code on the target system.
5) Exposed dangerous method or function (CVE-ID: CVE-2024-6806)
The vulnerability allows a remote attacker to compromise the system.
The vulnerability exists due to exposed dangerous method or function within the processing of service requests in the ProjectServer component. A remote attacker can execute arbitrary code on the target system.
6) Deserialization of Untrusted Data (CVE-ID: CVE-2024-6794)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data within the processing of service requests in the WaveformStreamingServer component. A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
7) Deserialization of Untrusted Data (CVE-ID: CVE-2024-6793)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data within the processing of service requests in the DataLoggingServer component. A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
8) Path traversal (CVE-ID: CVE-2024-6791)
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can trick a victim to open a specially crafted VSMODEL file and read arbitrary files on the system, leading to arbitrary code execution.
Remediation
Install update from vendor's website.
References
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-veristand-project-file.html
- https://www.zerodayinitiative.com/advisories/ZDI-24-1031/
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html
- https://www.zerodayinitiative.com/advisories/ZDI-24-1024/
- https://www.zerodayinitiative.com/advisories/ZDI-24-1025/
- https://www.zerodayinitiative.com/advisories/ZDI-24-1026/
- https://www.zerodayinitiative.com/advisories/ZDI-24-1027/
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html
- https://www.zerodayinitiative.com/advisories/ZDI-24-1028/
- https://www.zerodayinitiative.com/advisories/ZDI-24-1029/
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html
- https://www.zerodayinitiative.com/advisories/ZDI-24-1030/