Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2017-0145

Microsoft SMBv1 Remote Code Execution Vulnerability

Description

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 10 Aug 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.