CVE-2021-42976 - CVE House
Back to Database
Status published High CVE-2021-42976

NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler...

Vulnerability Description

NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42976

Credits & Attribution

No credits recorded in the NVD database.

References

More from nomachine

View All →
CVE-2022-48074
An issue in NoMachine before v8.2.3 allows attackers to execute...
Medium 5.3
CVE-2022-34043
Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows...
High 7.3
CVE-2021-42986
NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler...
High 8.8
CVE-2021-42983
NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler...
High 8.8
CVE-2021-42980
NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler...
High 8.8

Affected Vendor

Affected Software

enterprise desktop
Vulnerable Versions:
4.0.346

Timeline

Official Publish: December 7th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.