VULNERABILITY INTELLIGENCE

CVE-2016-2124

CVSS score5.9 MEDIUM
EPSS probability1.77%
CISA KEVNot currently listed
Published2022-02-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Weakness classification

  • CWE-287: Improper Authentication

Primary references