DLL Hijacking Vulnerability in NoMachine Software by Edk
CVE-2022-34043

7.3HIGH

Key Information:

Vendor

Nomachine

Status
Nomachine
Vendor
CVE Published:
29 June 2022

What is CVE-2022-34043?

NoMachine v7.9.2 is susceptible to a DLL hijacking vulnerability due to incorrect permissions set on its uninstall folder. This flaw allows attackers to exploit the folder's permissions, potentially leading to the execution of arbitrary code on affected systems. Proper configuration and oversight are critical in mitigating this security risk.

References

https://github.com/ycdxsb/Vuln/tree/main/Nomachine-Incorr...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.