Lucene search

MitreCVE-2023-39107

HistoryAug 04, 2023 - 6:15 p.m.

CVE-2023-39107

2023-08-0418:15:16

CWE-59

mitre

web.nvd.nist.gov

cve-2023-39107

nomachine

macos

vulnerability

file overwrite

nvd

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.4%

JSON

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

Affected configurations

Nvd

Node

nomachinenomachineRange<8.8.1

AND

applemacosMatch-

VendorProductVersionCPE
nomachinenomachine*cpe:2.3:a:nomachine:nomachine:*:*:*:*:*:*:*:*
applemacos-cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nomachine	nomachine	*	cpe:2.3:a:nomachine:nomachine::::::::
apple	macos	-	cpe:2.3:o:apple:macos:-:::::::*

References

kb.nomachine.com/SU07U00247

kb.nomachine.com/TR07U10948

www.ns-echo.com/posts/nomachine_afo.html

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.4%

JSON

Related for CVE-2023-39107