Lucene search

MicrosoftCVE-2017-0147

HistoryMar 17, 2017 - 12:59 a.m.

CVE-2017-0147

2017-03-1700:59:04

microsoft

web.nvd.nist.gov

1111

In Wild

windows

vulnerability

smbv1

security

information disclosure

nvd

cve-2017-0147

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0.928

Percentile

99.1%

JSON

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka “Windows SMB Information Disclosure Vulnerability.”

Affected configurations

Nvd

Vulners

Node

microsoftwindows_10_1507Match-

microsoftwindows_10_1511Match-

microsoftwindows_10_1607Match-

microsoftwindows_7Match-sp1

microsoftwindows_8.1Match-

microsoftwindows_rt_8.1Match-

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2sp1

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Match-

microsoftwindows_vistaMatch-sp2

Node

siemensacuson_p300_firmwareMatch13.02

siemensacuson_p300_firmwareMatch13.03

siemensacuson_p300_firmwareMatch13.20

siemensacuson_p300_firmwareMatch13.21

AND

siemensacuson_p300Match-

Node

siemensacuson_p500_firmwareMatchva10

siemensacuson_p500_firmwareMatchvb10

AND

siemensacuson_p500Match-

Node

siemensacuson_sc2000_firmwareRange4.0–4.0e

siemensacuson_sc2000_firmwareMatch5.0a

AND

siemensacuson_sc2000Match-

Node

siemensacuson_x700_firmwareMatch1.0

siemensacuson_x700_firmwareMatch1.1

AND

siemensacuson_x700Match-

Node

siemenssyngo_sc2000_firmwareRange4.0–4.0e

siemenssyngo_sc2000_firmwareMatch5.0a

AND

siemenssyngo_sc2000Match-

Node

siemenstissue_preparation_system_firmware

AND

siemenstissue_preparation_systemMatch-

Node

siemensversant_kpcr_molecular_system_firmware

AND

siemensversant_kpcr_molecular_systemMatch-

Node

siemensversant_kpcr_sample_prep_firmware

AND

siemensversant_kpcr_sample_prepMatch-

VendorProductVersionCPE
microsoftwindows_server_2016-cpe:/o:microsoft:windows_server_2016:-:::
microsoftwindows_vista-cpe:/o:microsoft:windows_vista:-:sp2::
microsoftwindows_10_1511-cpe:/o:microsoft:windows_10_1511:-:::
microsoftwindows_8.1-cpe:/o:microsoft:windows_8.1:-:::
microsoftwindows_server_2012-cpe:/o:microsoft:windows_server_2012:-:::
microsoftwindows_server_2008-cpe:/o:microsoft:windows_server_2008:-:sp2::
microsoftwindows_10_1507-cpe:/o:microsoft:windows_10_1507:-:::
microsoftwindows_10_1607-cpe:/o:microsoft:windows_10_1607:-:::
microsoftwindows_7-cpe:/o:microsoft:windows_7:-:sp1::
microsoftwindows_rt_8.1-cpe:/o:microsoft:windows_rt_8.1:-:::

Vendor	Product	Version	CPE
microsoft	windows_server_2016	-	cpe:/o:microsoft:windows_server_2016:-:::
microsoft	windows_vista	-	cpe:/o:microsoft:windows_vista:-:sp2::
microsoft	windows_10_1511	-	cpe:/o:microsoft:windows_10_1511:-:::
microsoft	windows_8.1	-	cpe:/o:microsoft:windows_8.1:-:::
microsoft	windows_server_2012	-	cpe:/o:microsoft:windows_server_2012:-:::
microsoft	windows_server_2008	-	cpe:/o:microsoft:windows_server_2008:-:sp2::
microsoft	windows_10_1507	-	cpe:/o:microsoft:windows_10_1507:-:::
microsoft	windows_10_1607	-	cpe:/o:microsoft:windows_10_1607:-:::
microsoft	windows_7	-	cpe:/o:microsoft:windows_7:-:sp1::
microsoft	windows_rt_8.1	-	cpe:/o:microsoft:windows_rt_8.1:-:::

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "Windows SMB",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016"
      }
    ]
  }
]