2 lines
14 KiB
JSON
2 lines
14 KiB
JSON
{"affected":[{"affectedData":[{"product":"Windows SMB","vendor":"Microsoft Corporation","versions":[{"status":"affected","version":"The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607"}]}],"source":"secure@microsoft.com"}],"cisaActionDue":"2022-04-15","cisaExploitAdd":"2022-03-25","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Windows SMB Remote Code Execution Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:server_message_block:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFFA22FC-A15A-4EB5-BED7-45F6EAFA8F80","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*","matchCriteriaId":"542DAEEC-73CC-46C6-A630-BF474A3446AC","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*","matchCriteriaId":"7A8E9D99-BD78-4340-88F2-5AFF27AC37C9","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*","matchCriteriaId":"61019899-D7AF-46E4-A72C-D189180F66AB","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","matchCriteriaId":"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:acuson_p300_firmware:13.02:*:*:*:*:*:*:*","matchCriteriaId":"0814F7B8-8022-4DCC-BE37-4868EB912881","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:acuson_p300_firmware:13.03:*:*:*:*:*:*:*","matchCriteriaId":"87A45473-9558-4165-949B-D63F1486F28E","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:acuson_p300_firmware:13.20:*:*:*:*:*:*:*","matchCriteriaId":"59E3D131-8FDF-424C-9BBA-41FDAE43F24C","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:acuson_p300_firmware:13.21:*:*:*:*:*:*:*","matchCriteriaId":"2C270FA0-6961-4181-8388-E609DAEADC09","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:acuson_p300:-:*:*:*:*:*:*:*","matchCriteriaId":"C07C8A47-9E8F-42E4-BB35-64590853A9C5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:acuson_p500_firmware:va10:*:*:*:*:*:*:*","matchCriteriaId":"506F5373-3C3C-4F47-8FC0-D5F04095B324","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:acuson_p500_firmware:vb10:*:*:*:*:*:*:*","matchCriteriaId":"42DBCB0C-2C71-4427-ADF8-FCB4920609B7","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:acuson_p500:-:*:*:*:*:*:*:*","matchCriteriaId":"3C50335A-8742-4E2B-B22D-0ED0A0DFB5C4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:acuson_sc2000_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3D47CA15-3B17-4145-BFD4-BE32841BE692","versionEndIncluding":"4.0e","versionStartIncluding":"4.0","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:acuson_sc2000_firmware:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"7DFBC156-20D1-4546-948F-A2118D602137","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:acuson_sc2000:-:*:*:*:*:*:*:*","matchCriteriaId":"70575FD4-0A0A-4D11-9069-F808D9F00D10","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:acuson_x700_firmware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B1E644CD-EA9B-45B5-A7C6-5F294D8A6909","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:acuson_x700_firmware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F38DAB6-39E2-4048-A57D-C3EB8415F3F2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:acuson_x700:-:*:*:*:*:*:*:*","matchCriteriaId":"05BD2983-B780-46F0-A857-CFC614D1B524","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:syngo_sc2000_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"31FE05B1-0B85-424F-9F30-14BFCB2ED15D","versionEndIncluding":"4.0e","versionStartIncluding":"4.0","vulnerable":true},{"criteria":"cpe:2.3:o:siemens:syngo_sc2000_firmware:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"1753DB4B-1F5A-4193-A50C-C2A576F0884C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:syngo_sc2000:-:*:*:*:*:*:*:*","matchCriteriaId":"25CEAC4F-CBA5-41BA-B389-4D0DA3F85B59","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:tissue_preparation_system_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6DE83393-E735-42BC-86E9-5DAF9F403C73","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:tissue_preparation_system:-:*:*:*:*:*:*:*","matchCriteriaId":"5641B967-9938-4148-90C4-D92C3E757847","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:versant_kpcr_molecular_system_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"582D4D5C-D0F1-403D-8687-3F1491943A65","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:versant_kpcr_molecular_system:-:*:*:*:*:*:*:*","matchCriteriaId":"68FE5E09-78BB-4A22-9CAA-93ECD7AC33A4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:versant_kpcr_sample_prep_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AA7B7CC4-E89E-4357-A7D6-AF74480F46B5","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:versant_kpcr_sample_prep:-:*:*:*:*:*:*:*","matchCriteriaId":"41EF3913-CD35-49FD-90D8-62228DB1390C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148."},{"lang":"es","value":"El servidor SMBv1 en Microsoft Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold y R2; Windows RT 8.1; y Windows 10 Gold, 1511 y 1607; y Windows Server 2016 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados, vulnerabilidad también conocida como Windows SMB Remote Code Execution Vulnerability\". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0143, CVE-2017-0144, CVE-2017-0145 y CVE-2017-0148."}],"id":"CVE-2017-0146","lastModified":"2026-06-17T00:57:09.713","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2017-0146","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-04T14:54:44.973813Z","version":"2.0.3"}}]},"published":"2017-03-17T00:59:04.070","references":[{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html"},{"source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/96707"},{"source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1037991"},{"source":"secure@microsoft.com","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf"},{"source":"secure@microsoft.com","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf"},{"source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"],"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"},{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0146"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41891/"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41987/"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/43970/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/96707"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1037991"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0146"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41891/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41987/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/43970/"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0146"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|