MEAC affected by Windows SMBv1 vulnerability
Microsoft disclosed a critical security vulnerability in the Microsoft Server Message Block 1.0 (SMBv1) back in 2017. A successful exploitation of this vulnerability could lead to remote code execution with administrator privileges.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-0144US | high8.8OT critical | KEV | ||
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationMEAC2012
We recommend disabling the SMBv1 protocol, as all current NAS drives support other protocols. Microsoft has published an article on how to disable SMBv1. This will help to protect the system from exploits of this vulnerability.
https://docs.microsoft.com/en-US/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3 - MitigationMEAC300
We recommend disabling the SMBv1 protocol, as all current NAS drives support other protocols. Microsoft has published an article on how to disable SMBv1. This will help to protect the system from exploits of this vulnerability.
https://docs.microsoft.com/en-US/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3 - FixedMEAC2012
This issue has been addressed in the Microsoft update for CVE-2017-0144.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0144 - FixedMEAC300
This issue has been addressed in the Microsoft update for CVE-2017-0144.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0144
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan