CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2017-01438.8/HIGHEPSS 93.3%CISA KEV
2017-03-17

Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0143, EternalBlue)

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system by sending crafted SMBv1 packets

[Mitigation] Apply the Microsoft MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse