MEAC affected by Windows SMBv1 vulnerability
Microsoft disclosed a critical security vulnerability in the Microsoft Server Message Block 1.0 (SMBv1) back in 2017. A successful exploitation of this vulnerability could lead to remote code execution with administrator privileges.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-0144US | high8.8OT kritisch | KEV | ||
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationMEAC2012
We recommend disabling the SMBv1 protocol, as all current NAS drives support other protocols. Microsoft has published an article on how to disable SMBv1. This will help to protect the system from exploits of this vulnerability.
https://docs.microsoft.com/en-US/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3 - MitigationMEAC300
We recommend disabling the SMBv1 protocol, as all current NAS drives support other protocols. Microsoft has published an article on how to disable SMBv1. This will help to protect the system from exploits of this vulnerability.
https://docs.microsoft.com/en-US/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3 - BehobenMEAC2012
This issue has been addressed in the Microsoft update for CVE-2017-0144.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0144 - BehobenMEAC300
This issue has been addressed in the Microsoft update for CVE-2017-0144.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0144
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan