Security Advisory - Remote Code Execution Vulnerability in Microsoft Windows SMBv1

2020-08-0500:00:00

Huawei Technologies

www.huawei.com

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.022

Percentile

89.6%

JSON

Microsoft released a security advisory about a remote code execution vulnerability in Server Message Block Version 1 (SMBv1). An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. (Vulnerability ID: HWPSIRT-2020-06149)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-1301.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-smb-en