CVE-2017-0147KEV · OVERDUE

Microsoft Windows SMBv1 Information Disclosure Vulnerability

High · published March 17, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.

1591
days past CISA
deadline
CVSS v3.1
7.5
EPSS
100%
Percentile
100.0
In the wild
Confirmed
What it is

🚨 An attacker can exploit this SMB vulnerability to sneak sensitive information right out of process memory! ⚡ Think of it like a sneaky thief who finds a way to tap into the conversation happening in a locked office — they don’t need to break in, just listen from the hallway to get all the juicy details. This vulnerability allows attackers to pull sensitive data right from your system’s memory — including credentials or other private info! Imagine a scenario where an intruder can gather critical information without ever being detected; the fallout could be absolutely devastating for your security!

Put simply

Think of it like a sneaky thief who finds a way to tap into the conversation happening in a locked office — they don’t need to break in, just listen from the hallway to get all the juicy details. This Windows SMB Information Disclosure Vulnerability lets remote attackers craft specific packets to access sensitive information stored in process memory, effectively bypassing security measures to glean private data.

What to do

This vulnerability allows attackers to pull sensitive data right from your system’s memory — including credentials or other private info! Imagine a scenario where an intruder can gather critical information without ever being detected; the fallout could be absolutely devastating for your security! To protect your systems, immediately patch to the latest version of Windows. Ensure SMBv1 is disabled on all machines, as it's outdated and poses significant risks. Regularly audit your configurations to stay ahead of potential threats! You've got this! Strengthen your defenses and secure your environment today! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.99693 · 100.0th percentile
Published
2017-03-17T00:00Z
KEV added
2022-05-24 · due 2022-06-14
EPSS history
Timeline
  • 24 MAY 00:00Z
    Added to CISA KEV — remediate by Jun 14
    kev
  • 17 MAR 00:00Z
    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT…
    cvelistv5