CVE-2024-1155

7.8 highEPSS 0.3%

High (7.8) in emerson. EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-276
Published: 2024-02-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

emerson:data_record_ad
emerson:flexlogger
emerson:g_web_development_software
emerson:labview_nxg
emerson:specification_compliance_manager
emerson:static_test_software_suite
emerson:sts_software_bundle
emerson:systemlink_server

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html

Check your stack JSON