Lucene search

[email protected]CVE-2020-1206

HistoryJun 09, 2020 - 8:15 p.m.

CVE-2020-1206

2020-06-0920:15:00

CWE-908

[email protected]

web.nvd.nist.gov

195

In Wild

cve-2020-1206

microsoft

smbv3

information disclosure

vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.79 High

EPSS

Percentile

98.2%

JSON

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka ‘Windows SMBv3 Client/Server Information Disclosure Vulnerability’.

VendorProductVersionCPE
microsoftwindows_10_1909 for 32-bit systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1909 for 32-bit systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1909 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1909 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1909 for arm64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1909 for arm64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_server,_version_1909unspecifiedcpe:2.3:o:microsoft:windows_server,_version_1909:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for 32-bit systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for 32-bit systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for arm64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for arm64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_server,_version_1903unspecifiedcpe:2.3:o:microsoft:windows_server,_version_1903:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_2004 for arm64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for arm64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_2004 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for x64-based systems:unspecified:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10_1909 for 32-bit systems	unspecified	cpe:2.3:o:microsoft:windows_10_1909 for 32-bit systems:unspecified:::::::*
microsoft	windows_10_1909 for x64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1909 for x64-based systems:unspecified:::::::*
microsoft	windows_10_1909 for arm64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1909 for arm64-based systems:unspecified:::::::*
microsoft	windows_server,_version_1909	unspecified	cpe:2.3:o:microsoft:windows_server,_version_1909:unspecified:::::::*
microsoft	windows_10_1903 for 32-bit systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for 32-bit systems:unspecified:::::::*
microsoft	windows_10_1903 for x64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:::::::*
microsoft	windows_10_1903 for arm64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for arm64-based systems:unspecified:::::::*
microsoft	windows_server,_version_1903	unspecified	cpe:2.3:o:microsoft:windows_server,_version_1903:unspecified:::::::*
microsoft	windows_10_2004 for arm64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_2004 for arm64-based systems:unspecified:::::::*
microsoft	windows_10_2004 for x64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_2004 for x64-based systems:unspecified:::::::*