high7.8
CVE-2024-1155
Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalat…
Impact
Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Data Record Ad | through 2.0.1 |
| Emerson | Flexlogger | through 2022_q3 |
| Emerson | G Web Development Software | through 2022_q3 |
| Emerson | Labview Nxg | Version 5.1 |
| Emerson | Specification Compliance Manager | through 2023_q4 |
| Emerson | Static Test Software Suite | through 1.2 |
| Emerson | Sts Software Bundle | through 21.0 |
| Emerson | Systemlink Server | before 2024_q1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html