Privilege Escalation in NoMachine Remote Desktop Software
CVE-2018-17980

7.8HIGH

Key Information:

Vendor

Nomachine

Status
Nomachine
Vendor
CVE Published:
15 October 2018

What is CVE-2018-17980?

A vulnerability in NoMachine software allows attackers to escalate privileges through a Trojan horse 'wintab32.dll' file placed in the same directory as a '.nxs' file. When executed, this malicious DLL can lead to unauthorized access, thereby compromising system integrity. This attack can occur on both local filesystems and network shares, making it critical for users of affected versions to apply any available security updates to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.nomachine.com/TR10P08887
x_refsource_CONFIRM
https://www.exploit-db.com/exploits/45611/
exploitx_refsource_EXPLOIT-DB
http://packetstormsecurity.com/files/149784/NoMachine-5.3...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.