Nomachine: >> Nomachine >> 6.7.6 Security Vulnerabilities
An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.
CVSS Score
9.1
EPSS Score
0.003
Published
2023-08-04
An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-02-03
NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.
CVSS Score
7.3
EPSS Score
0.0
Published
2022-04-28