Potential Escalation of Privilege via Local Access
CVE-2024-1155

7.8HIGH

Key Information:

Vendor

NI

Status
SystemLink Server
FlexLogger
Vendor
CVE Published:
20 February 2024

What is CVE-2024-1155?

The vulnerability presents a risk through incorrect permissions in the installation directories used by shared SystemLink Elixir based services. This misconfiguration may allow an authenticated user to exploit local access to potentially escalate privileges within the application. Proper configuration and regular updates are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

FlexLogger Windows 0 <= 2022 Q3

SystemLink Server Windows 0 <= 2023 Q3

References

https://www.ni.com/en/support/security/available-critical...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.