CVE-2024-4044

Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio

State: Published
Severity: 7.8 High
Published: May 10, 2024
Updated: Aug 1, 2024
Reserved: Apr 22, 2024

Description

A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects NI FlexLogger 2024 Q1 and prior versions as well as NI InstrumentStudio 2024 Q1 and prior versions.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	NI

Weaknesses

CWE-502 Deserialization of Untrusted Data

Affected Products

Product	Versions
FlexLoggerNI	24.1 and earlierAffected
InstrumentStudioNI	24.1 and earlierAffected

References

https://ni.com/r/CVE-2024-4044

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.