Privilege Escalation in NoMachine Remote Desktop Software
CVE-2018-17980
7.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2018-17980?
A vulnerability in NoMachine software allows attackers to escalate privileges through a Trojan horse 'wintab32.dll' file placed in the same directory as a '.nxs' file. When executed, this malicious DLL can lead to unauthorized access, thereby compromising system integrity. This attack can occur on both local filesystems and network shares, making it critical for users of affected versions to apply any available security updates to mitigate this risk.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.