Exploit / PoCcritical

103,000 machines are still vulnerable to SMBGhost attacks

Security Affairsby @securityaffairsNov 1, 2020 · 09:30 UTC (Nov 1, 2020)2 min read5 · 4 reads

Read at securityaffairs.com

Analyze CVE-2020-0796 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-0796

Tags: cve-2020-0796 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-0796	Unauthenticated RCE in Microsoft SMBv3 (SMBGhost)	10.0	100%	KEVRansomwarePoC ×2	Mar 12, 2020 KEV Feb 10, 2022

From the original article

2 min read at securityaffairs.com

Eight months after Microsoft issued a patch for the critical SMBGhost issues over 100,000 systems exposed online are still vulnerable to this attack. In March, Microsoft has addressed the critical SMBGhost vulnerability ( CVE-2020-0796 ) in the Server Message Block (SMB) protocol. “A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.