Improper input validation in Microsoft Windows SMB
Priority CRITICAL 94Exploited in the wildCWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.
Why it matters now
Exploitation Active In CISA KEV since 2022-04-06CISA due date 2022-04-27Known ransomware use
EPSS 0.99373 99th percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Windows SMB | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 | — | No fix listed | CNA |
- Windows SMB VendorMicrosoft Affected The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* | r2 sp1 | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* Versions r2 sp1 Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* | r2 | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:* | 13.02 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:* | 13.03 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:* | 13.20 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:* | 13.21 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:* | va10 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:* | vb10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:* | 4.0 to before 4.0e | Vulnerable | Siemens |
| cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:* | 5.0a | Vulnerable | Siemens |
| cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:* | 4.0 – 4.0e | Vulnerable | Siemens |
| cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:* | 5.0a | Vulnerable | Siemens |
| cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:* Versions 13.02 Vulnerable ·Siemens
- cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:* Versions 13.03 Vulnerable ·Siemens
- cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:* Versions 13.20 Vulnerable ·Siemens
- cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:* Versions 13.21 Vulnerable ·Siemens
- cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:* Versions va10 Vulnerable ·Siemens
- cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:* Versions vb10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:* Versions 4.0 to before 4.0e Vulnerable ·Siemens
- cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:* Versions 5.0a Vulnerable ·Siemens
- cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Siemens
- cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:* Versions 4.0 – 4.0e Vulnerable ·Siemens
- cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:* Versions 5.0a Vulnerable ·Siemens
- cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
No fixed version listed by the sources yet.
Timeline
- 2022-04-06 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2017-0148
- 2026-10-03 Alias added: GHSA-mfj7-24mx-p6qj
References
Exploit 4
More Microsoft Server Message Block vulnerabilities
- TI-2017-00137 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1… KEVCVSS 3.1HIGH 8.8
- TI-2017-00136 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1… KEVCVSS 3.1HIGH 8.8
- TI-2017-00135 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1… KEVCVSS 3.1HIGH 8.8
- TI-2017-00134 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1… KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2017-0148 · CVE Program
- CVE-2017-0148 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-mfj7-24mx-p6qj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences