CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-03-17
Microsoft Windows SMBv1 Remote Information Disclosure Vulnerability (CVE-2017-0147) Security Advisory
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can extract sensitive information from kernel process memory via crafted SMBv1 packets, which can be chained with tools like DOUBLEPULSAR for further compromise
[Mitigation] Apply the MS17-010 security update immediately and completely disable the legacy SMBv1 protocol across the enterprise