HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2017-0143

CVSS 8.8v3.1pub. 2017-03-17upd. 2026-04-22

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microsoft Server Message Block

    APP
    Microsoft
    1.0

  • Microsoft Windows 10 1507

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows 10 1511

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows 10 1607

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows 7

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows 8.1

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows Rt 8.1

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows Server 2008

    OS
    Microsoft
    r2

  • Microsoft Windows Server 2012

    OS
    Microsoft
    r2

  • Microsoft Windows Server 2016

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows Vista

    OS
    Microsoft
    wszystkie wersje

  • Philips Intellispace Portal

    APP
    Philips
    7.08.0

  • Siemens Acuson P300

    HW
    Siemens
    wszystkie wersje

  • Siemens Acuson P300 Firmware

    OS
    Siemens
    13.0213.0313.2013.21

  • Siemens Acuson P500

    HW
    Siemens
    wszystkie wersje

  • Siemens Acuson P500 Firmware

    OS
    Siemens
    va10vb10

  • Siemens Acuson Sc2000

    HW
    Siemens
    wszystkie wersje

  • Siemens Acuson Sc2000 Firmware

    OS
    Siemens
    5.0a4.0 – 4.0e (bez)

  • Siemens Acuson X700

    HW
    Siemens
    wszystkie wersje

  • Siemens Acuson X700 Firmware

    OS
    Siemens
    1.01.1

  • Siemens Syngo Sc2000

    HW
    Siemens
    wszystkie wersje

  • Siemens Syngo Sc2000 Firmware

    OS
    Siemens
    5.0a4.0 – 4.0e (bez)

  • Siemens Tissue Preparation System

    HW
    Siemens
    wszystkie wersje

  • Siemens Tissue Preparation System Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Versant Kpcr Molecular System

    HW
    Siemens
    wszystkie wersje

  • Siemens Versant Kpcr Molecular System Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Versant Kpcr Sample Prep

    HW
    Siemens
    wszystkie wersje

  • Siemens Versant Kpcr Sample Prep Firmware

    OS
    Siemens
    wszystkie wersje

CISA KEV — detailsi

Vendori
Microsoft ↗
Producti
Windows
Added to KEVi
November 3, 2021
Remediation deadline (US Federal)i
May 3, 2022(overdue)
Ransomwarei
Active ransomware campaigns exploit this vulnerability
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
☠️WYKORZYSTYWANE W RANSOMWARE⏰CISA DEADLINE: 3 maja 2022
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2025-59287CRITICAL9.8⚠ KEVPL ✓ten sam produkt

RCE w Windows Server Update Service (WSUS) — deserializacja danych

CVE-2020-1040CRITICAL9.0⚠ KEVten sam produkt

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly val...

CVE-2020-1350CRITICAL10.0⚠ KEVten sam produkt

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly ...

CVE-2020-0646CRITICAL9.8⚠ KEVten sam produkt

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properl...

CVE-2019-0708CRITICAL9.8⚠ KEVten sam produkt

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services wh...