Back to Database
Status published
High
CVE-2018-6947
An uninitialised stack variable in the nxfuse component that is...
Vulnerability Description
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6947
Credits & Attribution
No credits recorded in the NVD database.
References
More from nomachine
View All →CVE-2022-48074
An issue in NoMachine before v8.2.3 allows attackers to execute...
Medium
5.3
CVE-2022-34043
Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows...
High
7.3
CVE-2021-42986
NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler...
High
8.8
CVE-2021-42983
NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler...
High
8.8
CVE-2021-42980
NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler...
High
8.8
Affected Vendor
nomachine
View all reports →Affected Software
nomachine, windows 10, windows 7, windows 8
Vulnerable Versions:
0
Timeline
Official Publish:
February 28th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.