CVE-2018-17980
NoMachine < 5.3.27 - Remote Code Execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
-Decision
Descriptions
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current working directory, and the Trojan horse code is executed. (The directory could, in general, be on a local filesystem or a network share.).
NoMachine en versiones anteriores a la 5.3.27 y versiones 6.x anteriores a la 6.3.6 permite que los atacantes obtengan privilegios mediante un archivo wintab32.dll troyano en el mismo directorio que un archivo .nxs, tal y como queda demostrado por un escenario en el que el archivo .nxs y el DLL están el directorio de trabajo actual y se ejecuta el código del troyano. (En general, el directorio podría estar en un sistema de archivos local o una ubicación compartida en red).
NoMachine versions 5.3.26 and below suffer from a remote code execution vulnerability when opening a malicious .nxs file.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-10-04 CVE Reserved
- 2018-10-12 CVE Published
- 2024-03-07 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-426: Untrusted Search Path
CAPEC
References (4)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://www.nomachine.com/TR10P08887 | 2019-01-22 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Nomachine Search vendor "Nomachine" | Nomachine Search vendor "Nomachine" for product "Nomachine" | < 5.3.27 Search vendor "Nomachine" for product "Nomachine" and version " < 5.3.27" | - |
Affected
| ||||||
Nomachine Search vendor "Nomachine" | Nomachine Search vendor "Nomachine" for product "Nomachine" | >= 6.0.0 < 6.3.6 Search vendor "Nomachine" for product "Nomachine" and version " >= 6.0.0 < 6.3.6" | - |
Affected
|