CVE-2017-0147

KEV
Published: Mar 17, 2017 Last Modified: Ott 22, 2025
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
MEDIUM 4,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka 'Windows SMB Information Disclosure Vulnerability.'

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9242
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

Exploit

Microsoft Windows - SMB Remote Code Execution Scanner …

Verified Metasploit Framework (MSF)

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

Author: Sean Dillon Published: Status: Verified
View Exploit Code →
Exploit

Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' …

Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)

Author: Juan Sacco Published:
View Exploit Code →
Exploit

Microsoft Windows - 'EternalRomance'/'EternalSynergy'/'EternalChampion' SMB Remote Code Execution …

Verified Metasploit Framework (MSF)

Microsoft Windows - 'EternalRomance'/'EternalSynergy'/'EternalChampion' SMB Remote Code Execution (Metasploit) (MS17-010)

Author: Metasploit Published: Status: Verified
View Exploit Code →
Exploit

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

Verified Remote

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

Author: Metasploit Published: Status: Verified
View Exploit Code →
Operating System

Windows Server 2016 by Microsoft

Product Information
Vendor Microsoft
Product Windows Server 2016
Version -
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson P300 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson P300 Firmware
Version 13.02
cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Syngo Sc2000 Firmware by Siemens

Product Information
Vendor Siemens
Product Syngo Sc2000 Firmware
Version 5.0a
cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows Server 2008 by Microsoft

Product Information
Vendor Microsoft
Product Windows Server 2008
Version r2
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson P300 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson P300 Firmware
Version 13.21
cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson P500 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson P500 Firmware
Version vb10
cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson X700 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson X700 Firmware
Version 1.1
cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson P500 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson P500 Firmware
Version va10
cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows 10 1507 by Microsoft

Product Information
Vendor Microsoft
Product Windows 10 1507
Version -
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Versant Kpcr Molecular System Firmware by Siemens

Product Information
Vendor Siemens
Product Versant Kpcr Molecular System Firmware
cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson P300 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson P300 Firmware
Version 13.20
cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows Server 2008 by Microsoft

Product Information
Vendor Microsoft
Product Windows Server 2008
Version -
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows 10 1607 by Microsoft

Product Information
Vendor Microsoft
Product Windows 10 1607
Version -
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Tissue Preparation System Firmware by Siemens

Product Information
Vendor Siemens
Product Tissue Preparation System Firmware
cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows 10 1511 by Microsoft

Product Information
Vendor Microsoft
Product Windows 10 1511
Version -
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson Sc2000 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson Sc2000 Firmware
Version 5.0a
cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson P300 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson P300 Firmware
Version 13.03
cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Syngo Sc2000 Firmware by Siemens

Product Information
Vendor Siemens
Product Syngo Sc2000 Firmware
Version Range Affected
From 4.0 (inclusive)
To 4.0e (exclusive)
cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows Server 2012 by Microsoft

Product Information
Vendor Microsoft
Product Windows Server 2012
Version -
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Versant Kpcr Sample Prep Firmware by Siemens

Product Information
Vendor Siemens
Product Versant Kpcr Sample Prep Firmware
cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson X700 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson X700 Firmware
Version 1.0
cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows Vista by Microsoft

Product Information
Vendor Microsoft
Product Windows Vista
Version -
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows 7 by Microsoft

Product Information
Vendor Microsoft
Product Windows 7
Version -
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows Rt 8.1 by Microsoft

Product Information
Vendor Microsoft
Product Windows Rt 8.1
Version -
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Acuson Sc2000 Firmware by Siemens

Product Information
Vendor Siemens
Product Acuson Sc2000 Firmware
Version Range Affected
From 4.0 (inclusive)
To 4.0e (exclusive)
cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows Server 2012 by Microsoft

Product Information
Vendor Microsoft
Product Windows Server 2012
Version r2
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Windows 8.1 by Microsoft

Product Information
Vendor Microsoft
Product Windows 8.1
Version -
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017…
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Pa…
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neut…
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSA…
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execut…
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.…
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.…
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://portal.msrc.microsoft.com/en-US/security-guidance/a…
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/43970/
https://www.exploit-db.com/exploits/43970/
http://www.securityfocus.com/bid/96709
http://www.securityfocus.com/bid/96709
http://www.securitytracker.com/id/1037991
http://www.securitytracker.com/id/1037991
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Pa…
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neut…
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSA…
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execut…
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.…
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.…
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://portal.msrc.microsoft.com/en-US/security-guidance/a…
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/43970/
https://www.exploit-db.com/exploits/43970/
http://www.securityfocus.com/bid/96709
http://www.securityfocus.com/bid/96709
http://www.securitytracker.com/id/1037991
http://www.securitytracker.com/id/1037991