CVE-2017-12150CWE-300

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were…

High · published July 26, 2018

CVSS v3.0
7.4
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.13170 · 96.3th percentile
Weakness
CWE-300 · Channel Accessible by Non-Endpoint
Published
2018-07-26T18:00Z
EPSS history
Timeline
  • 26 JUL 18:00Z
    It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were…
    cvelistv5