CVE-2017-0143KEV · OVERDUE

Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

High · published March 17, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1634
days past CISA
deadline
CVSS v3.1
8.8
EPSS
93%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 A crafted packet is all it takes to turn your Windows machine into a playground for attackers! 🔥 Think of this vulnerability like a sneaky delivery person who can enter your home just by presenting a fake delivery slip. With the right packet, they could execute arbitrary code on your system without you even noticing! If exploited, attackers could gain full control, allowing them to run malicious code, steal your data, or even hold your system hostage. This isn't just a minor security lapse—it's like leaving your front door wide open for anyone to waltz in and take over your home!

Put simply

Think of this vulnerability like a sneaky delivery person who can enter your home just by presenting a fake delivery slip. With the right packet, they could execute arbitrary code on your system without you even noticing! This vulnerability in the SMBv1 server allows remote attackers to execute arbitrary code by sending specially crafted packets. Essentially, it’s a weakness in the way your system handles unexpected requests, leading to a complete compromise of the OS.

What to do

If exploited, attackers could gain full control, allowing them to run malicious code, steal your data, or even hold your system hostage. This isn't just a minor security lapse—it's like leaving your front door wide open for anyone to waltz in and take over your home! To protect yourself, disable SMBv1 if you haven't already, and patch your systems to the latest security updates. Ensure you're running Windows versions that have received the necessary updates to mitigate this threat. You've got this! Follow these steps, and you'll be on your way to fortifying your defenses! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.93307 · 99.8th percentile
Published
2017-03-17T00:00Z
KEV added
2021-11-03 · due 2022-05-03
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV — remediate by May 3
    kev
  • 17 MAR 00:00Z
    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT…
    cvelistv5