CNNVD-202509-228 Information

CNNVD ID

CNNVD-202509-228

CVE-2025-8614

  • CNNVD Published: 2025-09-02

Description (Chinese)

NoMachine是卢森堡NoMachine公司的一款远程桌面访问工具。 NoMachine存在代码问题漏洞,该漏洞源于OpenSSL配置路径不安全,可能导致本地权限提升。

Description (English)

NoMachine is a remote desktop access tool for NoMachine in Luxembourg. NoMachine has a code loophole, which stems from unsafe OpenSSL configuration paths, which may lead to local power upgrades.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

NoMachine

Published

2025-09-02

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-835/ https://kb.nomachine.com/TR04W11314 https://nvd.nist.gov/vuln/detail/CVE-2025-8614

Share on: