CVE-2017-0148

HighCVSS 8.1/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Mar 17, 2017
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 6, 2022
NVD status
Analyzed

Related CVEs from 2017

CVE-2017-01498.8Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vCVE-2017-01507.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01517.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01528.1A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in MicrosCVE-2017-01544.4Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackCVE-2017-01557.0The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local userCVE-2017-01567.0An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows ServerCVE-2017-01587.5An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, anCVE-2017-01593.7A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats reqCVE-2017-01607.8Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious CVE-2017-01618.1The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold aCVE-2017-01627.6A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R
CVE-2017-0148: High severity, CVSS 8.1 | Vulnix