CVE-2017-0148

Опубликовано: 17 мар. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 9.3

EPSS Критический

Описание

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.

Ссылки

http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96706
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037991
Broken Link
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Third Party Advisory
US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0148
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41891/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41987/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96706
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037991
Broken Link
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Third Party Advisory
US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0148
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41891/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41987/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0e (исключая)

cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

Одно из

cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*

cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*

cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

Одно из

cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0e (включая)

cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*

cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.94175

Критический

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-20

Связанные уязвимости

CVE-2017-0148

CVSS3: 8.1

msrc

больше 8 лет назад

Windows SMB Remote Code Execution Vulnerability

GHSA-mfj7-24mx-p6qj

CVSS3: 8.1

github

около 3 лет назад

BDU:2017-01095

fstec

больше 8 лет назад

Уязвимость протокола SMBv1 операционной системы Microsoft Windows, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 100%

0.94175

Критический

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-20