Nomachine CVE-2023-39107

CRITICAL

Improper Link Resolution Before File Access (CWE-59)

2023-08-04 cve@mitre.org

Information Disclosure Apple Nomachine

9.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 04, 2023 - 18:15 nvd

CRITICAL 9.1

DescriptionNVD

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

AnalysisAI

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-59. An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks. Affected products include: Nomachine.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nomachine

View all

CVE-2017-12763 HIGH This Week POC

An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privil

CVE-2021-42986 HIGH This Week POC

NoMachine Enterprise Client is affected by Integer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low a

CVE-2021-42983 HIGH This Week POC

NoMachine Enterprise Client is affected by Buffer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low at

CVE-2021-42980 HIGH This Week POC

NoMachine Cloud Server is affected by Buffer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low attack

CVE-2021-42979 HIGH This Week POC

NoMachine Cloud Server is affected by Integer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low attack

CVE-2021-42977 HIGH This Week POC

NoMachine Enterprise Desktop is affected by Integer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low

CVE-2021-42976 HIGH This Week POC

NoMachine Enterprise Desktop is affected by Buffer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low a

CVE-2021-42973 HIGH This Week POC

NoMachine Server is affected by Integer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low attack compl

CVE-2021-42972 HIGH This Week POC

NoMachine Server is affected by Buffer Overflow. Rated high severity (CVSS 8.8), this vulnerability is low attack comple

CVE-2018-17980 HIGH This Week POC

NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file lo

CVE-2018-6947 HIGH This Week POC

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoM

CVE-2022-34043 HIGH This Week POC

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perf

Same weakness CWE-59 – Improper Link Resolution Before File Access

View all

CVE-2020-0787 HIGH POC

CVE-2015-1130 HIGH POC

CVE-2015-5287 HIGH POC

CVE-2026-41091 HIGH POC

CVE-2019-1069 HIGH POC

CVE-2026-81963 HIGH POC

CVE-2016-6664 HIGH POC

CVE-2025-60710 HIGH POC

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

CVE-2021-34523 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

Share

CVE-2023-39107 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy