CVE-2021-42977

ALTO 8.8CVE-2021-42977 · Published 07/12/2021 · updated 17/06/2026

In breve

CVE-2021-42977 è una vulnerabilità ALTO (CVSS 8.8) che riguarda enterprise desktop (nomachine).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 42.6% delle vulnerabilità.
Correzione: aggiornare a 7.7.4 o successiva.

Package	Affected versions	Patched versions
enterprise desktop nomachine	`> 4.0.346, < 7.7.4`	`7.7.4`

Description

NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

References

sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services · Exploit

Altre vulnerabilità di enterprise desktop

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free