CVE-2017-0147: Microsoft Windows SMBv1 Information Disclosure
Microsoft Windows SMBv1 Information Disclosure Vulnerability. The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.
- CISA KEV-listed (remediation due 2022-06-14)
- used in ransomware campaigns
- EPSS 92.8% (99.8% percentile)