Unquoted Windows Search Path Vulnerability in NSClient++

CVE-2018-6384 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a malicious program.exe executable in the %SYSTEMDRIVE% folder.

Learn more about our User Device Pen Test.