Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-669x-j2pw-grf8

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.

EPSS

Процентиль: 12%
0.00042
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
nvd
почти 4 года назад

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.

CVSS3: 5.9
fstec
почти 4 года назад

Уязвимость механизма загрузки DLL-файлов системы удаленного доступа к рабочему столу NoMachine, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 12%
0.00042
Низкий

7.3 High

CVSS3