CVE-2017-0147
KEV · RansomwareMicrosoft Windows SMBv1 Information Disclosure Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- SMBv1 server
- Date added
- May 24, 2022
- Due date
- Jun 14, 2022
- Known ransomware use
- Known
- CWEs
- CWE-200
Description
The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.
Required action
Apply updates per vendor instructions.