Vulnerability CVE-2017-0280

Vulnerability CVE-2017-0280

Published: 2017-05-12

Description:

The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.

Type:

CWE-20

(Improper Input Validation)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.1/10	6.9/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
None	None	Complete

Affected software
Microsoft -> Windows 10
Microsoft -> Windows rt 8.1
Microsoft -> Windows server 2016
Microsoft -> Windows server 2008
Microsoft -> Windows 8.1
Microsoft -> Windows server 2012
Microsoft -> Windows 7

References:

http://www.securityfocus.com/bid/98273

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280

Copyright 2024, cxsecurity.com