EXPOSURES › CVE-2017-0144
CVE-2017-0144
CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 95/100
ransomwarerceexploited-in-wild
Microsoft's SMBv1 vulnerability (CVE-2017-0144) allowed remote code execution and was actively exploited, often linked to ransomware attacks, impacting DIB organizations reliant on legacy Windows systems and SMB file sharing.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
Microsoft faced severe fallout due to CVE-2017-0144, a critical SMBv1 remote code execution vulnerability that was widely exploited, leading to significant security concerns and reputational damage.
Microsoft faced severe fallout due to CVE-2017-0144, a critical SMBv1 remote code execution vulnerability that was widely exploited, leading to significant security concerns and reputational damage.
"The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets."
No usable content available; source returned a connection error and provided no substantive coverage of the vulnerability or Microsoft's response.
AFFECTED FEDRAMP PRODUCTS · 4
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |