Attacker Value
Very High
CVE-2017-0144 (MS17-010)
CVE-2017-0144 (MS17-010)
(Last updated July 25, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Initial Access
Techniques
Validation
Lateral Movement
Techniques
Validation
Metasploit Module
Description
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka “Windows SMB Remote Code Execution Vulnerability.” This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.
Add Assessment
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
8.8 High
Impact Score:
5.9
Exploitability Score:
2.8
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- microsoft,
- siemens
Products
- acuson p300 firmware 13.02,
- acuson p300 firmware 13.03,
- acuson p300 firmware 13.20,
- acuson p300 firmware 13.21,
- acuson p500 firmware va10,
- acuson p500 firmware vb10,
- acuson sc2000 firmware,
- acuson sc2000 firmware 5.0a,
- acuson x700 firmware 1.0,
- acuson x700 firmware 1.1,
- server message block 1.0,
- syngo sc2000 firmware,
- syngo sc2000 firmware 5.0a,
- tissue preparation system firmware,
- versant kpcr molecular system firmware,
- versant kpcr sample prep firmware
Metasploit Modules
Exploited in the Wild
References
Advisory
