2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"SystemLink Server","vendor":"NI","versions":[{"lessThanOrEqual":"2023 Q3","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["Windows"],"product":"FlexLogger","vendor":"NI","versions":[{"lessThanOrEqual":"2022 Q3","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@ni.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:emerson:data_record_ad:*:*:*:*:*:*:*:*","matchCriteriaId":"2267E001-7C8A-4E3C-BAA3-C4108CDC2C11","versionEndIncluding":"2.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:flexlogger:*:*:*:*:*:*:*:*","matchCriteriaId":"A05CEECE-4F09-4875-97F5-D419044299B8","versionEndIncluding":"2022_q3","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:g_web_development_software:*:*:*:*:*:*:*:*","matchCriteriaId":"1C4008CF-D7BB-4400-AF25-69A468E0274F","versionEndIncluding":"2022_q3","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:labview_nxg:5.1:*:*:*:community:*:*:*","matchCriteriaId":"E84E23D5-04EB-4B73-B335-AD1F9ECA6166","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:labview_nxg:5.1:*:*:*:real-time_module:*:*:*","matchCriteriaId":"25474D7C-8523-49BF-8D83-5D82A0D95FD0","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:labview_nxg:5.1:*:*:*:web_module:*:*:*","matchCriteriaId":"06AE0E0E-8E3C-416F-97EC-308FB2953B56","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:specification_compliance_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"18B58D78-41AA-484A-A184-DFA999ED504B","versionEndIncluding":"2023_q4","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:static_test_software_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"338BAA7F-884C-41D8-B131-9E2C2FD46DC6","versionEndIncluding":"1.2","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:sts_software_bundle:*:*:*:*:*:*:*:*","matchCriteriaId":"B018440C-809C-4E30-9A08-AAF79D7D280E","versionEndIncluding":"21.0","vulnerable":true},{"criteria":"cpe:2.3:a:emerson:systemlink_server:*:*:*:*:*:*:*:*","matchCriteriaId":"95CF6EFB-FED4-428A-8CE5-AAE9D12A64FB","versionEndExcluding":"2024_q1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access. \n"},{"lang":"es","value":"Los permisos incorrectos en los directorios de instalación para los servicios compartidos basados en SystemLink Elixir pueden permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso local."}],"id":"CVE-2024-1155","lastModified":"2026-06-17T07:03:35.727","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@ni.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1155","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-02-20T18:08:51.196119Z","version":"2.0.3"}}]},"published":"2024-02-20T15:15:09.703","references":[{"source":"security@ni.com","tags":["Exploit","Vendor Advisory"],"url":"https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"url":"https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html"}],"sourceIdentifier":"security@ni.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"security@ni.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-863"}],"source":"nvd@nist.gov","type":"Primary"}]}
|