Local Privilege Escalation in NoMachine's DokanFS Component
CVE-2018-6947
7.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2018-6947?
The vulnerability in NoMachine's DokanFS component arises from an uninitialized stack variable. This flaw allows a local low privileged user to exploit it to gain elevated privileges on Windows 7 systems, while for Windows 8 and 10, it leads to potential denial of service. Users operating on affected versions are at risk and should seek to address this vulnerability promptly.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.