Search/CVE-2017-0144
● CVE — High

CVE-2017-0144

Vendormicrosoft, siemensProductserver message block, acuson p300 firmware, acuson p500 firmware, acuson sc2000 firmware, acuson x700 firmware, syngo sc2000 firmware, tissue preparation system firmware, versant kpcr molecular system firmware, versant kpcr sample prep firmwareDiscoveredMar 17, 2017UpdatedAug 14, 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
99.2%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
14
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
25 relationships
Timeline
disclosure → media coverage
Mar 17, 2017
Disclosure — published as a CVE record. · last revised by NVD Aug 14, 2026
Jul 25, 2025
securelist.com reports: ToolShell: a story of five vulnerabilities in Microsoft SharePoint
Jul 25, 2025
bleepingcomputer.com reports: The role of the cybersecurity PM in incident-driven development
Sep 10, 2025
helpnetsecurity.com reports: Automated network pentesting uncovers what traditional tests missed
Sep 15, 2025
bleepingcomputer.com reports: Microsoft says Windows September updates break SMBv1 shares
Oct 10, 2025
helpnetsecurity.com reports: From theory to training: Lessons in making NICE usable
Dec 4, 2025
cybersecitalia.it reports: Quando il codice diventa pressione: gli zero-day nella diplomazia coercitiva
Mar 9, 2026
itmedia.co.jp reports: iPhoneを狙う高度なハッキングツール「Coruna」発見　米政府から流出、犯罪集団の手に渡ったか
Jun 4, 2026
cybersecurity360.it reports: Le 4 dimensioni del rischio sistemico cyber nell’era dell’intelligenza artificiale
Jun 18, 2026
infosecurity-magazine.com reports: LATAM Infrastructure Hit by Fortinet and Ivanti Exploits
Jul 2, 2026
securelist.com reports: Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects
Jul 9, 2026
therecord.media reports: NSA revives 'Tailored Access Operations' name for elite hacking unit
Aug 11, 2026
securityweek.com reports: Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption
Oct 24, 2026
redhotcyber.com reports: Patch impossibili da installare in tempo: l’AI cambia le regole della cybersecurity
Oct 29, 2026
theregister.com reports: Admin dropped the F-bomb in a password to show hackers who was really 1337
Public PoC (10)
github.com/peterpt/eternal_scannergithub.com/kimocoder/eternalbluegithub.com/EEsshq/CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Executiongithub.com/quynhold/Detect-CVE-2017-0144-attackgithub.com/ducanh2oo3/Vulnerability-Research-CVE-2017-0144github.com/AnugiArrawwala/CVE-Researchgithub.com/denuwanjayasekara/CVE-Exploitation-Reportsgithub.com/sethwhy/BlueDoorgithub.com/AtithKhawas/autobluegithub.com/MedX267/EternalBlue-Vulnerability-Scanner
Unverified third-party code — review before executing.