CVE-2018-6384

HIGH 7.8CVE-2018-6384 · Published 31/01/2018 · updated 17/06/2026

In short

CVE-2018-6384 is a HIGH (CVSS 7.8) vulnerability affecting nsclient++ (nsclient).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.9% of all vulnerabilities.
Fix: update to 0.4.1.73 or later.

Package	Affected versions	Patched versions
nsclient++ nsclient	`< 0.4.1.73`	`0.4.1.73`

Description

Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a malicious program.exe executable in the %SYSTEMDRIVE% folder.

References

nsclient.org/blog/2018/01/30/CVE-2018-6384-0.3.9 · Vendor Advisory
on-x.com/sites/default/files/on-x_-_security_advisory_-_nsclient_-_cve-2018-6384.pdf · Exploit

More vulnerabilities in nsclient++

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free