Vulnerability identifier: #VU47858

Vulnerability risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2019-1040

CWE-ID: CWE-300

Exploitation vector: Network

Exploits in database: 2

• April 18, 2021
  • UltraRealy_with_CVE-2019-1040 (Updated version for the tool UltraRealy with support of the CVE-2019-1040 exploit) [Github]
• January 3, 2021
  • dcpwn (an impacket-dependent script exploiting CVE-2019-1040) [Github]

Impact: Data manipulation

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft