CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
MikroTik RouterOS SMB Service Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2018-7445) Analysis and Mitigation Guide
[Affected Scope] All architectures and devices running MikroTik RouterOS before versions 6.41.3 or 6.42rc27
[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted NetBIOS session requests, leading to full remote code execution with administrative privileges
[Mitigation] Immediately upgrade RouterOS to the latest stable release (6.41.3+ or 6.42rc27+) and disable the SMB service if it is not business-critical
Microsoft Windows Search Service Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-8543)
[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.
[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.
[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.