CVE-2018-6384

PoC —

CVSS 3.0

7.8 high

EPSS

<1%p54

Published

Jan 31, 2018 (Jan 31, 2018)

Modified

Jun 17, 2026

Description

Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a malicious program.exe executable in the %SYSTEMDRIVE% folder.

Vendors: nsclient
Products: nsclient\+\+
Weakness: CWE-428
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.