Skip to content
Fencer Intel
high 7.2

CVE-2013-3956 json

The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista a…

published 13y ago modified 4mo ago also EUVD-2013-3888

cvss
7.2
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
7.8%
EPSS 7.8% chance of exploitation in 30 days, percentile 94%
public exploits
3
Metasploit and Exploit-DB

Summary

The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.

Is CVE-2013-3956 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Timeline

  1. First public exploit (Metasploit exploit/windows/local/novell_client_nicm)
  2. Published

Exploit prediction

7.80% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • Metasploit exploit/windows/local/novell_client_nicm Novell Client 2 SP3 nicm.sys Local Privilege Escalation metasploit exploit, average rank, 2013-05-22
  • EDB-27191 Novell Client 2 SP3 - 'nicm.sys 3.1.11.0' Local Privilege Escalation local, 2013-07-29
  • EDB-26452 Novell Client 2 SP3 - 'nicm.sys' Local Privilege Escalation (Metasploit) local, 2013-06-26
  • pastebin.com http://pastebin.com/GB4iiEwR referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.