logo

CVE-2017-0147 - Microsoft Windows SMBv1 Information Disclosure Vulnerability

Project:Microsoft

Product:SMBv1 server

Date Added:2022-05-24Due Date:2022-06-14

Vulnerability Name

Microsoft Windows SMBv1 Information Disclosure Vulnerability

Description

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.

Known To Be Used in Ransomware Campaigns?

Known

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-0147