Sploitus

CVE-2018-6947

5 known exploits for CVE-2018-6947

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.

Affected products
Dokanfs, Nomachine, Windows 10, Windows 7, Windows 8
Nomachine
≤ 6.0.66_2
CVSS 3.0
7.8 HIGH
EPSS
4.0% (90th percentile)
Weakness
CWE-665
NVD status
Modified
Published
2018-02-28
CVE-2018-6947 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2018-6947

Proof-of-concept code and exploit modules indexed by Sploitus

NoMachine nxfuse Privilege Escalation
2018-02-23 Fidus InfoSecurityPACKETSTORMPython
NoMachine < 6.0.80 (x64) - 'nxfuse' Privilege Escalation
2018-02-22 Fidus InfoSecurityEXPLOITDBPython
NoMachine < 6.0.80 (x86) - 'nxfuse' Privilege Escalation
2018-02-22 Fidus InfoSecurityEXPLOITDBC
NoMachine x64 < 6.0.80 - nxfuse Privilege Escalation Exploit
2018-02-22 Fidus InfoSecurityZDTPython
NoMachine x86 < 6.0.80 - nxfuse Privilege Escalation Exploit
2018-02-22 Fidus InfoSecurityZDTC