CVE-2017-0269

moderate-risk
Published 2017-05-12

The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280.

Do I need to act?

~
9.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.9/10 Medium
NETWORK / HIGH complexity

Affected Products (11)

Affected Vendors

Microsoft

References (8)

Third Party Advisory http://www.securityfocus.com/bid/98263
http://www.securitytracker.com/id/1038433
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Mitigation https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0269
Third Party Advisory http://www.securityfocus.com/bid/98263
http://www.securitytracker.com/id/1038433
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Mitigation https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0269
45
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 11/34 · Low
Exposure 16/34 · Moderate