CVE-2021-33436: High severity nomachine vulnerability
NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-33436.
What is the severity rating of CVE-2021-33436?
CVE-2021-33436 has a severity rating of 7.3 (high).
What is the affected software for CVE-2021-33436?
The affected software for CVE-2021-33436 is NoMachine for Windows versions prior to 6.15.1 and 7.5.2.
How does CVE-2021-33436 impact the affected software?
CVE-2021-33436 allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and potentially execute code as NT.
Where can I find more information about CVE-2021-33436?
You can find more information about CVE-2021-33436 at the following references: [GitHub Advisory](https://github.com/active-labs/Advisories/blob/master/2021/ACTIVE-2021-001.md), [NoMachine Knowledge Base Article 1](https://knowledgebase.nomachine.com/SU05S00223), [NoMachine Knowledge Base Article 2](https://knowledgebase.nomachine.com/SU05S00224).