CVE-2024-6121: flexlogger — Fix

Description

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.

Is your site exposed to CVE-2024-6121?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
ni	flexlogger	< 2023
ni	flexlogger	All
ni	systemlink	< 2024
ni	systemlink	All

References

Advisories & Patches

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/ni-systemlink-server-ships-out-of-date-redis-version.html https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/ni-systemlink-server-ships-out-of-date-redis-version.html

Frequently Asked Questions

What is CVE-2024-6121? +

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2024-6121? +

CVE-2024-6121 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2024-6121? +

CVE-2024-6121 affects products from ni, specifically: flexlogger, systemlink. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-6121? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-6793 9.8

A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful …

CVE-2024-6794 9.8

A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. …

CVE-2024-6806 9.8

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may …

CVE-2025-2449 8.8

NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary …

CVE-2025-2450 8.8

NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute …

CVE-2024-6791 7.8

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code …

CVE-2024-6121