CVE-2017-0144: Microsoft Windows SMB Remote Code Execution (EternalBlue)

Published 2017-03-14T04:59:00.000 Updated 2024-07-29T16:45:00.000 CWE: CWE-94

Summary

The SMBv1 server in Microsoft Windows Vista SP2 through Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka Windows SMB Remote Code Execution Vulnerability. This flaw was widely exploited by the WannaCry ransomware worm.

Severity

CRITICAL

CVSS Score: 8.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited (CISA KEV)

Known Exploited Vulnerability

Added: 2022-02-10 · Remediation deadline: 2022-08-10

Apply updates per vendor instructions.

Source Attribution

Source: NVD · Updated: 2024-07-29T16:45:00.000 · Confidence: high

Impact

Based on CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H — assess confidentiality, integrity, and availability impact via the official vector documentation.

Affected Software

Windows (Microsoft)
Affected: Vista SP2 - Server 2016

Fix: MS17-010

Fix

Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.