CVE-2024-1155 — Incorrect permissions for shared NI SystemLink Elixir based services

Description (CNA)

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (CNA)

Vendor / product	Versions
NI / SystemLink Server	affected 0 through 2023 Q3
NI / FlexLogger	affected 0 through 2022 Q3

CWE

CWE-276

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html