CVE-2021-33436
28.04.2022, 11:15
NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.Enginsight
Vendor | Product | Version |
---|---|---|
nomachine | nomachine | 6.0.0 ≤ 𝑥 < 6.15.1 |
nomachine | nomachine | 7.0 ≤ 𝑥 < 7.5.2 |
𝑥
= Vulnerable software versions
References