CVE-2017-0147

Опубликовано: 17 мар. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Критический

Описание

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."

Ссылки

http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96709
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037991
Broken Link
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Third Party Advisory
US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41891/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41987/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43970/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96709
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037991
Broken Link
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Third Party Advisory
US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41891/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0e (исключая)

cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

Одно из

cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0e (исключая)

cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*

cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.92418

Критический

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-0147

CVSS3: 8.1

msrc

больше 8 лет назад

Windows SMB Information Disclosure Vulnerability

GHSA-xh7q-7r6g-64g2

CVSS3: 5.9

github

около 3 лет назад

BDU:2017-01096

fstec

больше 8 лет назад

Уязвимость протокола SMBv1 операционной системы Microsoft Windows, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 100%

0.92418

Критический

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo