CVE-2017-0147

High · 7.5 CISA KEV · ransomware

CVSS

7.5

EPSS

99.7%

Published

Mar 17, 2017

CISA due date

Jun 14, 2022

The record

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed