CVE-2018-6947
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 3.1%
from disclosure to weapon0 days
Published on NVDFeb 28
1st PoCFeb 22
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.
Affected products
n/a · n/apublic PoCs found — 4
cve_referencewww.exploit-db.com/exploits/44167/unverifiedcve_referencewww.exploit-db.com/exploits/44168/unverifiedexploitdbwww.exploit-db.com/exploits/44167unverifiedexploitdbwww.exploit-db.com/exploits/44168unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.