Описание
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
Ссылки
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- US Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:x64:*
EPSS
Процентиль: 100%
0.94424
Критический
10 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-119
CWE-119
Связанные уязвимости
CVSS3: 10
msrc
больше 5 лет назад
Windows SMBv3 Client/Server Remote Code Execution Vulnerability
CVSS3: 10
github
больше 3 лет назад
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
CVSS3: 8.4
fstec
больше 5 лет назад
Уязвимость реализации сетевого протокола Server Message Block (SMBv3) операционных систем Windows, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 100%
0.94424
Критический
10 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-119
CWE-119