CVE-2024-6791

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

• CWE-22
• CWE-22

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.htmlVendor Advisory
• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.htmlVendor Advisory

Published

Jul 22, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6785The configuration file stores credentials in cleartext. An a…7.1
• CVE-2024-6786The vulnerability allows an attacker to craft MQTT messages …6.5
• CVE-2024-6787This vulnerability occurs when an attacker exploits a race c…5.9
• CVE-2024-6788A remote unauthenticated attacker can use the firmware updat…9.8
• CVE-2024-6789A path traversal issue in API endpoint in M-Files Server bef…6.5
• CVE-2024-6790Loop with Unreachable Exit Condition ('Infinite Loop') vulne…6.1
• CVE-2024-6792The WP ULike WordPress plugin before 4.7.2.1 does not prope…3.5
• CVE-2024-6793A deserialization of untrusted data vulnerability exists in …9.8
• CVE-2024-6794A deserialization of untrusted data vulnerability exists in …9.8
• CVE-2024-6795In Connex health portal released before8/30/2024, SQL inject…9.8
• CVE-2024-6796In Baxter Connex health portal released before 8/30/2024, an…9.1
• CVE-2024-6797The DL Robots.txt WordPress plugin through 1.2 does not sani…4.8