IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
8.8Hoch KEV In Ransomware genutzt

CVE-2017-0143Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

Microsoft Corporation Windows SMB Veröffentlicht: (vor 9 Jahren)

Bekannt ausgenutzt — Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

CISA hat am 03.11.2021 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 03.05.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-0143

Beschreibung

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
microsoft server message block 1.0
Microsoft Corporation Windows SMB The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607
philips intellispace portal 7.0
siemens acuson p300 firmware 13.02
siemens acuson p500 firmware va10
siemens acuson sc2000 firmware 4.0 – < 4.0e
siemens acuson x700 firmware 1.0
siemens syngo sc2000 firmware 4.0 – < 4.0e
siemens tissue preparation system firmware —
siemens versant kpcr molecular system firmware —
siemens versant kpcr sample prep firmware —

Referenzen und Patches

CPE-Treffer (NVD) (18)
  • cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:* ≥ 4.0 < 4.0e
  • cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:* ≥ 4.0 < 4.0e
  • cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — Microsoft Windows

7.8Hoch
CVE-2026-119382

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.