CISA confirmed this vulnerability is used in real attacks on 10.02.2022. Remediation deadline for US federal agencies: 10.08.2022.
Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| microsoft | windows 10 1903 | — | |
| microsoft | windows 10 1909 | — | |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | unspecified | |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | unspecified | |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | unspecified | |
| Microsoft | Windows 10 Version 1909 for 32-bit Systems | unspecified | |
| Microsoft | Windows 10 Version 1909 for ARM64-based Systems | unspecified | |
| Microsoft | Windows 10 Version 1909 for x64-based Systems | unspecified | |
| microsoft | windows server 1903 | — | |
| microsoft | windows server 1909 | — | |
| Microsoft | Windows Server, version 1903 (Server Core installation) | unspecified | |
| Microsoft | Windows Server, version 1909 (Server Core installation) | unspecified |
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:x64:*Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.