CVEvulnerability
CVE-2017-0280
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.
Affected configurations
• microsoft windows 10
• microsoft windows 10 1511
• microsoft windows 10 1607
• microsoft windows 10 1703
• microsoft windows 7
• microsoft windows 8.1
• microsoft windows rt 8.1
• microsoft windows server 2008
• microsoft windows server 2008 r2
• microsoft windows server 2012
• microsoft windows server 2012 r2
• microsoft windows server 2016
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/98273 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 ics-cert.us-cert.gov
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280 Mitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/98273 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 ics-cert.us-cert.gov
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280 Mitigation, Patch, Vendor Advisory