VULNERABILITY INTELLIGENCE
CVE-2017-0145
CVSS score8.8 HIGH
EPSS probability89.85%
CISA KEVKnown exploited vulnerability
Published2017-03-17
Last modified2026-08-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft SMBv1 Remote Code Execution Vulnerability
Vendor / product: Microsoft / SMBv1
Description
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148.
Primary references
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
- secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory
- secure@microsoft.com — Third Party Advisory
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry