← CVE Intelligence

CVE-2024-4044

Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio PUBLISHED

Description (CNA)

A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects NI FlexLogger 2024 Q1 and prior versions as well as NI InstrumentStudio 2024 Q1 and prior versions.

Affected (CNA)

Vendor / productVersions
NI / FlexLoggeraffected 0 through 24.1
NI / InstrumentStudioaffected 0 through 24.1

CWE

CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.