EXPOSURES › CVE-2019-0703
CVE-2019-0703
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Windows SMB server leaked data via CVE-2019-0703, an unpatched flaw actively exploited in the wild.
The Windows SMB server mishandled certain requests, causing information disclosure. DIB orgs must care because unpatched, actively exploited flaws like this breach CMMC/NIST 800-171 requirements for patch management and supply-chain risk, forcing immediate patching and network segmentation to limit exposure.
Shame score — A known, unpatched vulnerability was actively exploited in the wild, demonstrating negligence in patch management and supply-chain risk.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |