PT-2022-6521 · Nomachine · Nomachine

Published 2022-06-29 · Updated 2023-08-08 · CVE-2022-34043

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NoMachine version 7.9.2

Description The issue is related to incorrect permissions for the folder C:ProgramDataNoMachinevaruninstall of NoMachine, which allows attackers to perform a DLL hijacking attack and execute arbitrary code. This is due to default permission settings that are not secure. Exploitation of this issue can enable an attacker to execute arbitrary code.

Recommendations For NoMachine version 7.9.2, consider correcting the permissions for the folder C:ProgramDataNoMachinevaruninstall to prevent unauthorized access and mitigate the risk of a DLL hijacking attack. As a temporary workaround, restrict access to this folder until a patch is available.

Exploit

Fix

Incorrect Default Permissions

Incorrect Permission

Weakness Enumeration

CWE-276

CWE-732

Related Identifiers

BDU:2023-01971

CVE-2022-34043

Affected Products

Nomachine

References · 6

• 🔥 https://github.com/ycdxsb/Vuln/tree/main/Nomachine-Incorrect-Folder-Permission · Exploit
• https://bdu.fstec.ru/vul/2023-01971 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34043 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34043 · Vendor Advisory
• https://github.com/advisories/GHSA-8h8j-c543-w37v · Note
• https://t.me/cibsecurity/45361 · Telegram Post