Lucene search

K
jvnJapan Vulnerability NotesJVN:14451678
HistoryAug 17, 2018 - 12:00 a.m.

JVN#14451678: NoMachine App for Android vulnerable to environment variables alteration

2018-08-1700:00:00
Japan Vulnerability Notes
jvn.jp
524

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

60.2%

NoMachine App for Android contains an information alteration vulnerability.

Impact

A remote attacker may alter environemt variables of the NoMachine App. As a result, arbitrary code may be executed.

Solution

Update the Software
Update to the latest version of software according to the information provided by the developer.

Products Affected

  • NoMachine App for Android 5.0.63 and earlier
    According to the developer, the software is affected by this vulnerability only when it is operated under Android 6.0.1 and earlier versions.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

60.2%

Related for JVN:14451678