CVE-2021-33436 - CVE House
Back to Database
Status published High CVE-2021-33436

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer...

Vulnerability Description

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33436

Credits & Attribution

No credits recorded in the NVD database.

References

More from nomachine

View All →
CVE-2022-48074
An issue in NoMachine before v8.2.3 allows attackers to execute...
Medium 5.3
CVE-2022-34043
Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows...
High 7.3
CVE-2021-42986
NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler...
High 8.8
CVE-2021-42983
NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler...
High 8.8
CVE-2021-42980
NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler...
High 8.8

Affected Vendor

Affected Software

nomachine
Vulnerable Versions:
6.0.0, 7.0

Timeline

Official Publish: April 28th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.