CVE-2017-0144

UNKNOWN

Published 2017-03-17T00:00:00.000Z

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2017-0144. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1

8.8

/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score Metrics

Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14

0.944

probability

of exploitation in the wild

There is a 94.4% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25

Exploit Probability

Percentile: 1.000

Higher than 100.0% of all CVEs

Attack Vector Metrics

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Impact Metrics

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Description

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Microsoft Corporation

Windows SMB

Affected Versions:

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607

Known Exploited Vulnerability

This vulnerability is actively being exploited in the wild

View KEV Details

Remediation Status

Overdue

Due Date

August 10, 2022

Added to KEV

February 10, 2022

Required Action

Apply updates per vendor instructions.

Affected Product

Vendor/Project: Microsoft

Product: SMBv1

Ransomware Risk

Known Ransomware Use

KEV Catalog Version: 2025.01.24 Released: January 24, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-8w56-gqrj-2wfg

Advisory Details

CVSS Scoring

CVSS Score

7.5

CVSS Vector


                                    CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-0144

WEB https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf

WEB https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf

WEB https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02

WEB https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0144

WEB https://www.exploit-db.com/exploits/41891

WEB https://www.exploit-db.com/exploits/41987

WEB https://www.exploit-db.com/exploits/42030

WEB https://www.exploit-db.com/exploits/42031

WEB http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html

WEB http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html

WEB http://www.securityfocus.com/bid/96704

WEB http://www.securitytracker.com/id/1037991

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2022, Modified: July 24, 2024

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

3 posts

Reddit • 3 weeks, 5 days ago

profess-x

PoC

Hackerin update Se você quer **aprender na prática como funcionaram algumas das vulnerabilidades mais famosas da história**, acabamos de lançar novos conteúdos na nossa plataforma (100% em português 🇧🇷). 👉 Módulos recém-lançados: * Heartbleed (**CVE-2014-0160**) * EternalBlue (**CVE-2017-0144**) * Dirty COW (**CVE-2016-5195**) * Drupalgeddon2 (**CVE-2018-7600**) * WordPress RevSlider (**CVE-2014-9735**) * …