Known vulnerabilities in VeriStand

Vendor: National Instruments
Software: VeriStand
Software CPE: cpe:2.3:a:national_instruments:veristand:*:*:*:*:*:*:*:*
Website: https://www.ni.com/en-us.html
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VeriStand VeriStand is affected by 9 known vulnerabilities: 6 high, 3 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96220 - Exposed Dangerous Method or Function
CVE-2024-6805		 CWE-749 Medium
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU96219 - Exposed Dangerous Method or Function
CVE-2024-6805		 CWE-749 Medium
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024, 2024 Q3 19.08.2024 SB20240819161
#VU96218 - Exposed Dangerous Method or Function
CVE-2024-6806		 CWE-749 High
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU96217 - Exposed Dangerous Method or Function
CVE-2024-6806		 CWE-749 High
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU96216 - Deserialization of Untrusted Data
CVE-2024-6794		 CWE-502 High
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU96212 - Deserialization of Untrusted Data
CVE-2024-6793		 CWE-502 High
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU96211 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-6791		 CWE-22 High
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU96194 - Deserialization of Untrusted Data
CVE-2024-6675		 CWE-502 High
No
No
 2021 R3 Patch 2, 2023 Q4 Patch 1, 2024 Q3 19.08.2024 SB20240819161
#VU83207 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-5136		 CWE-611 Medium
No
No
 - 15.11.2023 SB2023111542