CVEvulnerability

CVE-2017-0147

7.5 HIGH Known exploited Published 2017-03-17 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Windows SMBv1 Information Disclosure Vulnerability — Microsoft SMBv1 server

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.

Added to KEV: 2022-05-24
Remediation due: 2022-06-14
Ransomware use: Known
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0147

Status: Analyzed
Published: 2017-03-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."

Affected configurations

• microsoft windows 10 1507 • microsoft windows 10 1511 • microsoft windows 10 1607 • microsoft windows 7 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows vista • siemens acuson p300 firmware 13.02 • siemens acuson p300 firmware 13.03 • siemens acuson p300 firmware 13.20 • siemens acuson p300 firmware 13.21 • siemens acuson p500 firmware va10 • siemens acuson p500 firmware vb10 • siemens acuson sc2000 firmware (>= 4.0 < 4.0e) • siemens acuson sc2000 firmware 5.0a • siemens acuson x700 firmware 1.0 • siemens acuson x700 firmware 1.1 • siemens syngo sc2000 firmware (>= 4.0 < 4.0e) • siemens syngo sc2000 firmware 5.0a • siemens tissue preparation system firmware • siemens versant kpcr molecular system firmware • siemens versant kpcr sample prep firmware

References

http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96709 Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037991 Broken Link, Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 Third Party Advisory, US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147 Patch, Vendor Advisory
https://www.exploit-db.com/exploits/41891/ Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41987/ Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/43970/ Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96709 Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037991 Broken Link, Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 Third Party Advisory, US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147 Patch, Vendor Advisory
https://www.exploit-db.com/exploits/41891/ Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41987/ Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/43970/ Exploit, Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0147 US Government Resource