Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

SambaCry is reality, crooks are abusing CVE-2017

Security Affairsby @securityaffairs ()3 min read3 · 2 reads
Read at securityaffairs.com
Analyze CVE-2017-7494 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2017-7494
Tags
cve-2017-7494vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2017-7494
Unauthenticated RCE in Samba via malicious shared library upload (SambaCry)
9.899%KEVRansomware
KEV

From the original article

3 min read at securityaffairs.com

Security experts from Kaspersky confirmed that threat actors in the wild are exploiting the SambaCry vulnerability CVE-2017-7494 to spread a miner. At the end of May, a seven-year-old remote code execution vulnerability affecting all versions of the Samba software since 3. 5.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.