CVE-2023-39107
N/A
N/A
Summary
An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://kb.nomachine.com/TR07U10948
- https://kb.nomachine.com/SU07U00247
- https://www.ns-echo.com/posts/nomachine_afo.html
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: yes
- Technical Impact: total
References
- https://kb.nomachine.com/TR07U10948
- https://kb.nomachine.com/SU07U00247
- https://www.ns-echo.com/posts/nomachine_afo.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.