HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2017-0143

CVSS 8.8v3.1pub. 2017-03-17upd. 2026-04-22

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microsoft Server Message Block

    APP
    Microsoft
    1.0

  • Microsoft Windows 10 1507

    OS
    Microsoft
    all versions

  • Microsoft Windows 10 1511

    OS
    Microsoft
    all versions

  • Microsoft Windows 10 1607

    OS
    Microsoft
    all versions

  • Microsoft Windows 7

    OS
    Microsoft
    all versions

  • Microsoft Windows 8.1

    OS
    Microsoft
    all versions

  • Microsoft Windows Rt 8.1

    OS
    Microsoft
    all versions

  • Microsoft Windows Server 2008

    OS
    Microsoft
    r2

  • Microsoft Windows Server 2012

    OS
    Microsoft
    r2

  • Microsoft Windows Server 2016

    OS
    Microsoft
    all versions

  • Microsoft Windows Vista

    OS
    Microsoft
    all versions

  • Philips Intellispace Portal

    APP
    Philips
    7.08.0

  • Siemens Acuson P300

    HW
    Siemens
    all versions

  • Siemens Acuson P300 Firmware

    OS
    Siemens
    13.0213.0313.2013.21

  • Siemens Acuson P500

    HW
    Siemens
    all versions

  • Siemens Acuson P500 Firmware

    OS
    Siemens
    va10vb10

  • Siemens Acuson Sc2000

    HW
    Siemens
    all versions

  • Siemens Acuson Sc2000 Firmware

    OS
    Siemens
    5.0a4.0 – 4.0e (excl.)

  • Siemens Acuson X700

    HW
    Siemens
    all versions

  • Siemens Acuson X700 Firmware

    OS
    Siemens
    1.01.1

  • Siemens Syngo Sc2000

    HW
    Siemens
    all versions

  • Siemens Syngo Sc2000 Firmware

    OS
    Siemens
    5.0a4.0 – 4.0e (excl.)

  • Siemens Tissue Preparation System

    HW
    Siemens
    all versions

  • Siemens Tissue Preparation System Firmware

    OS
    Siemens
    all versions

  • Siemens Versant Kpcr Molecular System

    HW
    Siemens
    all versions

  • Siemens Versant Kpcr Molecular System Firmware

    OS
    Siemens
    all versions

  • Siemens Versant Kpcr Sample Prep

    HW
    Siemens
    all versions

  • Siemens Versant Kpcr Sample Prep Firmware

    OS
    Siemens
    all versions

CISA KEV — detailsi

Vendori
Microsoft ↗
Producti
Windows
Added to KEVi
November 3, 2021
Remediation deadline (US Federal)i
May 3, 2022(overdue)
Ransomwarei
Active ransomware campaigns exploit this vulnerability
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
☠️WYKORZYSTYWANE W RANSOMWARE⏰CISA DEADLINE: 3 maja 2022
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-33824CRITICAL9.8⚠ KEVPL ✓same product

Double free w Windows IKE Extension umożliwia zdalne wykonanie kodu

CVE-2025-59287CRITICAL9.8⚠ KEVPL ✓same product

RCE w Windows Server Update Service (WSUS) — deserializacja danych

CVE-2020-1040CRITICAL9.0⚠ KEVPL ✓same product

RCE w Hyper-V RemoteFX vGPU — błąd walidacji wejścia od gościa

CVE-2020-1350CRITICAL10.0⚠ KEVPL ✓same product

RCE w Windows DNS Server — krytyczna podatność SIGRed (CVSS 10.0)

CVE-2020-0646CRITICAL9.8⚠ KEVPL ✓same product

RCE w Microsoft .NET Framework — nieprawidłowa walidacja danych wejściowych