Vulnerability identifier: #VU6012

Vulnerability risk: High

CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2017-0144

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 11

• March 18, 2020
  • eternal_scanner (An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)) [Github]
  • MS17-010 SMB RCE Detection [Metasploit]
  • Microsoft Windows Windows 7/8.1/2008 R2/2012 R2/2016 R2 - 'EternalBlue' SMB Remote Code Execution (MS17-010) [Exploit-DB]
  • Microsoft Windows Windows 7/2008 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010) [Exploit-DB]
  • Microsoft Windows Windows 8/2012 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010) [Exploit-DB]
  • Microsoft Windows - SrvOs2FeaToNt SMB Remote Code Execution (MS17-010) [Exploit-DB]
  • Microsoft Windows - Uncredentialed SMB RCE (MS17-010) (Metasploit) [Exploit-DB]
  • SMB DOUBLEPULSAR Remote Code Execution [Metasploit]
  • DOUBLEPULSAR Payload Execution and Neutralization [Metasploit]
  • MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption for Win8+ [Metasploit]
  • MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption [Metasploit]

Impact: Code execution

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft