Rapid7 Vulnerability & Exploit Database

Microsoft Windows: CVE-2017-11780: Windows SMB Remote Code Execution Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Windows: CVE-2017-11780: Windows SMB Remote Code Execution Vulnerability

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
10/10/2017
Created
07/25/2018
Added
10/10/2017
Modified
09/11/2024

Description

The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly handle certain requests, aka "Windows SMB Remote Code Execution Vulnerability".

Solution(s)

  • microsoft-windows-windows_10-1507-kb4042895
  • microsoft-windows-windows_10-1511-kb4041689
  • microsoft-windows-windows_10-1607-kb4041691
  • microsoft-windows-windows_10-1703-kb4041676
  • microsoft-windows-windows_server_2012-kb4041679
  • microsoft-windows-windows_server_2012_r2-kb4041687
  • microsoft-windows-windows_server_2016-1607-kb4041691
  • msft-kb4041678-45ea4c02-1f47-4865-a9a8-e3e12a123abd
  • msft-kb4041678-542b51ca-2e40-4c7c-b1f6-113dd3ad3fc2
  • msft-kb4041678-ab110ea9-218e-41f7-b51b-af6fba0a726f
  • msft-kb4041678-abc11d4b-adbb-47e6-af90-b9864891d46c
  • msft-kb4041678-cea9a334-2c33-4b56-ba35-b5a1b89793b2
  • msft-kb4041678-eb5e144d-d861-46b4-9fc4-251917ea63ad
  • msft-kb4041679-4aa7d02c-1328-4f53-b136-faf79e2475c8
  • msft-kb4041679-72b1b537-615d-4b25-b7e7-34350dcd0aab
  • msft-kb4041687-092e7af4-3dd9-4daf-b99f-27b776380751
  • msft-kb4041687-92b0c4d3-a90b-4879-ba50-5542e1183baf
  • msft-kb4041995-05f68efa-bdc8-4a5e-86e3-04b51d3e83fe
  • msft-kb4041995-5a6c2c9a-4154-410d-bbb0-c7f083cf5056
  • msft-kb4041995-91819a2b-406d-412e-a714-945522bc5216
  • msft-kb4041995-db4984c3-9435-43f2-a683-aafa3ab9fb04

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;