CVE-2017-0280

Summary

The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.

Impact & exploitability

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products we track (2)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280 ↗

Additional information

• NVD record
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280Patch
• http://www.securityfocus.com/bid/98273Advisory
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02