Firetruck

CVE-2020-0796

KEV · Ransomware

Microsoft SMBv3 Remote Code Execution Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
SMBv3
Date added
Feb 10, 2022
Due date
Aug 10, 2022
Known ransomware use
Known
CWEs
CWE-119

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

Required action

Apply updates per vendor instructions.

Notes