Every CVE Search/ Get API key

CVE-2017-0144

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...

8.8 HighIn KEVPublic exploit

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

99.2%Up 3.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Record
CVE-2017-0144
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List 8.8

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Record
CVE-2017-0144
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2017-0511 8.8

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Record
EUVD-2017-0511
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8w56-gqrj-2wfg 8.1

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Record
GHSA-8w56-gqrj-2wfg
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
CISA KEV No score

Microsoft SMBv1 Remote Code Execution Vulnerability

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

Record
CVE-2017-0144
Weakness
CWE-20
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitMS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption2017-03-14
MetasploitSMB DOUBLEPULSAR Remote Code Execution2017-04-14
Exploit-DBMicrosoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)2017-04-17
Exploit-DBMicrosoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)2017-05-10
Exploit-DBMicrosoft Windows 8/8.1/2012 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010)2017-05-17
Exploit-DBMicrosoft Windows 7/2008 R2 - 'EternalBlue' SMB Remote Code Execution (MS17-010)2017-05-17
Exploit-DBMicrosoft Windows 7/8.1/2008 R2/2012 R2/2016 R2 - 'EternalBlue' SMB Remote Code Execution (MS17-010)2017-07-11
PoC in GitHubpeterpt/eternal_scanner2017-07-16
PoC in GitHubkimocoder/eternalblue2019-06-02
Exploit-DBDOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)2019-10-02
Show 24 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubEEsshq/CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution2021-03-22
PoC in GitHubquynhold/Detect-CVE-2017-0144-attack2022-12-16
PoC in GitHubducanh2oo3/Vulnerability-Research-CVE-2017-01442024-04-03
PoC in GitHubAnugiArrawwala/CVE-Research2024-07-03
PoC in GitHubdenuwanjayasekara/CVE-Exploitation-Reports2024-09-11
PoC in GitHubsethwhy/BlueDoor2024-12-21
PoC in GitHubAtithKhawas/autoblue2024-12-30
PoC in GitHubMedX267/EternalBlue-Vulnerability-Scanner2025-02-03
PoC in GitHubpelagornisandersi/WIndows-7-automated-exploitation-using-metasploit-framework-2025-05-30
PoC in GitHubluckyman2907/SMB-Protocol-Vulnerability_CVE-2017-01442025-06-25
PoC in GitHubAdityaBhatt3010/VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint2025-07-10
PoC in GitHubFireTemple/Blackash-CVE-2017-01442025-11-27
PoC in GitHubklairmanraj/Multi-VLAN-Enterprise-Network-Security-Infrastructure2026-04-20
PoC in GitHubklairmanraj/Multi-VLAN-Enterprise-Network-Vulnerability-Assessment2026-04-20
PoC in GitHubklairmanraj/Vulnerability-Risk-Assessment-TVRA-Enterprise-Network2026-04-20
PoC in GitHubdannic145/EternalBlue-Exploit-Demonstration2026-04-22
PoC in GitHubichhyak22/EternalBlue-Exploit-Demonstration-MS17-0102026-04-23
PoC in GitHubtrinadh-dasari-cyber/eternalblue-ms17-010-research2026-05-13
PoC in GitHub0xBlackash/CVE-2017-01442026-06-14
PoC in GitHubprobablysecure/Triage-CVE-2017-01442026-06-29
PoC in GitHubronankongala/metasploit-pentest-report2026-08-29
PoC in GitHubporcumarcooo/TryHackMe-Blue-MS17-0102026-09-10
PoC in GitHubquincyomoruyi6-lang/BLUE-WRITEUP-CVE-2017-01442026-09-10
MetasploitMS17-010 SMB RCE Detection

Plus 1 more. The full list has every link.

History

History
RecordedChangedSources
exploitation
exploits, exploits_more
exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-0144 is a high vulnerability (CVSS 8.8) in Microsoft Smbv1, published March 17, 2017. CISA lists it as known to be exploited, since February 10, 2022. EUVD reports exploitation since February 10, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.2%, the 99th percentile. No source names a fixed version.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open