CVE-2017-0147

Microsoft's SMBv1 vulnerability (CVE-2017-0147) allowed attackers to steal sensitive data from Windows processes via crafted packets, and was actively exploited in ransomware attacks, demonstrating a critical failure to secure a core Windows component.

This vulnerability, actively exploited and linked to ransomware, enabled attackers to extract sensitive information from Windows processes through crafted network packets. DIB organizations using systems with SMBv1 enabled face significant exposure and compliance risks (NIST 800-171 controls 3.1.1, 3.1.2, 3.1.3) and must immediately disable SMBv1 and apply Microsoft's patch.

Shame score — The widespread exploitation of a critical vulnerability in a core Microsoft component, linked to ransomware, reflects a significant failure in security practices and risk management.