CVE-2024-6122 is an information disclosure vulnerability affecting NI SystemLink Server 2024 Q1 and prior, as well as NI FlexLogger 2023 Q2 and prior versions that utilize the shared KeyValueDatabase service. The flaw stems from incorrect permissions in the installation directory, allowing local attackers to access sensitive information. Rated Medium with a CVSS score of 5.5, this vulnerability requires local access and low privileges, but does not involve user interaction. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2024CPE matchmatch criteria | cpe:2.3:a:ni:systemlink:*:*:*:*:*:*:*:* | ||
2024CPE matchmatch criteria | cpe:2.3:a:ni:systemlink:2024:q1:*:*:*:*:*:* | ||
<= 2023CPE matchmatch criteria | cpe:2.3:a:ni:flexlogger:*:*:*:*:*:*:*:* | ||
2023CPE matchmatch criteria | cpe:2.3:a:ni:flexlogger:2023:q2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.