CVE-2017-0148

Microsoft SMBv1 server — Microsoft SMBv1 Server Remote Code Execution Vulnerability
⚠️ CVSS 3.1  8.1 / 10 — HIGH 🔴 CISA Known Exploited Vulnerability

Overview

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.

https://nvd.nist.gov/vuln/detail/CVE-2017-0148

Key Details

PropertyValue
CVE ID CVE-2017-0148
Vendor / Product Microsoft — SMBv1 server
NVD Published2017-03-17
NVD Last Modified2025-10-22
CVSS 3.1 Score8.1
CVSS 3.1 VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
SeverityHIGH
CISA KEV Added2022-04-06
CISA KEV Deadline2022-04-27
Known Ransomware Use ⚠️ Yes

CVSS 3.1 Breakdown

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Required Action

CISA BOD 22-01 Deadline: 2022-04-27. Apply updates per vendor instructions.

Timeline

DateEvent
2022-04-06Added to CISA Known Exploited Vulnerabilities catalog
2022-04-27CISA BOD 22-01 remediation deadline

References

ResourceType
NVD — CVE-2017-0148 Vulnerability Database
CISA KEV Catalog Entry US Government