CVE-2021-42973

ALTO 8.8CVE-2021-42973 · Published 07/12/2021 · updated 17/06/2026

En resumen

CVE-2021-42973 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a server (nomachine).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.50%, mayor que el 42.6% de las vulnerabilidades.
Solución: actualizar a 7.7.4 o posterior.

Package	Affected versions	Patched versions
server nomachine	`> 4.0.346, < 7.7.4`	`7.7.4`

Description

NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

References

sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services · Exploit

Más vulnerabilidades de server

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free