CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0148) - MS17-010
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending crafted packets, leading to complete system compromise
[Mitigation] Apply the MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0146)
[Affected Scope] Legacy Microsoft Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled.
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted SMBv1 packets, leading to complete system compromise.
[Mitigation] Immediately apply the official Microsoft security update (MS17-010) and completely disable the legacy SMBv1 protocol across the enterprise network.
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0145, EternalBlue/DoublePulsar)
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/kernel privileges by sending specially crafted SMBv1 packets, leading to complete system compromise
[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0144, EternalBlue)
[Affected Scope] Legacy and modern Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled.
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted SMBv1 packets, leading to complete system compromise.
[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network.
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0143, EternalBlue)
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system by sending crafted SMBv1 packets
[Mitigation] Apply the Microsoft MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network