Detections
Analytics
CVE-2017-0144
high
Description
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.
References
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
https://securityaffairs.com/181286/breaking-news/analyzing-evolution-of-the-pipemagic-malware.html
https://thehackernews.com/2025/08/microsoft-windows-vulnerability.html
https://securelist.com/pipemagic/117270/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-050a
https://www.darkreading.com/threat-intelligence/prometei-botnet-cryptojacker-worldwide
https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub
https://thehackernews.com/2024/09/cosmicbeetle-deploys-custom-scransom.html
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-242a
https://services.google.com/fh/files/misc/m-trends-2024.pdf
https://securelist.com/stripedfly-perennially-flying-under-the-radar/110903/
https://www.exploit-db.com/exploits/42031/
https://www.exploit-db.com/exploits/42030/
https://unit42.paloaltonetworks.com/lucifer-new-cryptojacking-and-ddos-hybrid-malware/
https://www.welivesecurity.com/wp-content/uploads/2020/06/ESET_InvisiMole.pdf
https://github.com/muhammedalakbarli/cvault
https://github.com/saif4224/autonomous-pentest-pipeline
https://github.com/saif4224/autonomous-attack-path-pipeline
https://github.com/joebrown-RH/network.security.demo
https://github.com/igameta/SeeVE
https://github.com/enjoylife96962930-a11y/bug-bounty-series-2026
https://github.com/PT-CODING/Netrecon
https://github.com/fayazmohmmand/asm-platform
https://github.com/BL3IP/port-vuln-scanner
https://github.com/BL3IP/iocsift
https://github.com/NovocaineX/pentest-metasploit
https://github.com/safetylab/ShadowSecurityScanner
https://github.com/harshweb-cyber/Netscout
https://github.com/0xBlackash/CVE-2017-0144
https://github.com/Guppss/VulnScan-Pro
https://github.com/YameenMunir/Systems-and-Cyber-Security-Coursework
https://github.com/Kartik0219/vuln-scanner
https://github.com/trishab0807-lgtm/home-network-scanner
https://github.com/p1ngzac/cve-lookup
https://github.com/ZacSilver-Fedora/cve-lookup
https://github.com/SallyAboud/Vulnerability-Scanner
https://github.com/Silence-Cy/ModuScan
https://github.com/Ateebshaikh21/red-team-ai
https://github.com/staatik/fragchain-core
https://github.com/krish-achanta/vuln-validator
https://github.com/ShacharLF/Network-Scanner
https://github.com/Vashisth81/risk-scoring-framework
https://github.com/Akalka/Ai-Windows-Penetration-testing-Assistant-
https://github.com/Ernest-Kosmatko/Netrecon
https://github.com/trinadh-dasari-cyber/eternalblue-ms17-010-research
https://github.com/joel6948/CVE-Writeups
https://github.com/Luca-css/port-scanner-rs
https://github.com/mentalEdge984/ReconIQ
https://github.com/mrjoker-web/ShadowCVE
https://github.com/ichhyak22/EternalBlue-Exploit-Demonstration-MS17-010
https://github.com/ichhyak22/EternalBlue-DoublePulsar-Exploit-Demonstration
https://github.com/dannic145/EternalBlue-Exploit-Demonstration
https://github.com/dannic145/EternalBlue-DoublePulsar-Exploit-Demonstration
https://github.com/klairmanraj/Multi-VLAN-Enterprise-Network-Vulnerability-Assessment
https://github.com/klairmanraj/Vulnerability-Risk-Assessment-TVRA-Enterprise-Network
https://github.com/klairmanraj/Multi-VLAN-Enterprise-Network-Security-Infrastructure
https://github.com/Lavan08-op/vulnerability-scanner
https://github.com/Sombra-1/vulnmind
https://github.com/joemunene-by/GhostLM
https://github.com/owlsecx/OSpecter
https://github.com/akshita06-byte/CVE_CHATBOT
https://github.com/yashtony/network-vulnerability-scanner
https://github.com/plusive27-max/cve-lookup
https://github.com/chiranths09/Syntecxhub_Project_Vulnerability-CVE-Scanner
https://github.com/abhi12103606/ThreatVision-SOC
https://github.com/Selvawen/programmatic-vulnerability-remediations
https://github.com/F45elix/network-vuln-scanner
https://github.com/paperclipsvinny/cve-of-the-week
https://github.com/nichxlxs/cve-research
https://github.com/ndouglas-cloudsmith/ExploitPwned
https://github.com/CVE-ORG/CVE-ORG
https://github.com/Arthurfert/SecLLM-Gen
https://github.com/hackingyseguridad/smb
https://github.com/qrb661r/CVE-MITRE
https://github.com/Noxpy/Noxpy
https://github.com/0xMarturano/Noxpy
https://github.com/Mitsu-bis/Eternal-Blue-CVE-2017-0144-THM-Write-Up
https://github.com/0wn2886/CVE-Web
https://github.com/Techryptic/ThreatPulse
https://github.com/AbbeAlthany/Windows-7_och_CVE-2017-0144_Exploit
https://github.com/jturini/PoC_Hunter
https://github.com/B1ack4sh/Blackash-CVE-2017-0144
https://github.com/wintra/CVE-Analysis-Incident-Response
https://github.com/brinman2002/cve-preview
https://github.com/RicheByte/exploitdbPro
https://github.com/JMG15111998/Common-Vulnerabilities-and-Exposures-CVEs-
https://github.com/giriaryan694-a11y/exposed-win-zero-days
https://github.com/cyberleelawat/LeelawatX-CVE-Hunter
https://github.com/AdityaBhatt3010/VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint
https://github.com/ZTheH/netmap
https://github.com/suman-git74/Vulnerability-Scanner
https://github.com/luckyman2907/SMB-Protocol-Vulnerability_CVE-2017-0144
https://github.com/b4nxzz/CVEs
https://github.com/threatsurfer/cve-attack-mapper
https://github.com/pelagornisandersi/WIndows-7-automated-exploitation-using-metasploit-framework-
https://github.com/chriszubiaga/parse_CVEListV5
https://github.com/PuddinCat/GithubRepoSpider
https://github.com/elsevar11/CVE_SCRAPER
https://github.com/shaxana/cve_project_akm
https://github.com/MedX267/EternalBlue-Vulnerability-Scanner
https://github.com/David-Ogrande/CVEs-NVD
https://github.com/AtithKhawas/autoblue
https://github.com/PotiteBulle/CVE20170144_EternalCustom
https://github.com/sethwhy/BlueDoor
https://github.com/Theophile-Wemaere/poc-on-github-downloader
https://github.com/DenuwanJayasekara/CVE-Exploitation-Reports
https://github.com/JustMahmud1/CVE-Scraper-v2
https://github.com/elihemzeyev/CVE
https://github.com/AnugiArrawwala/CVE-Research
https://github.com/Zeyad-Azima/Remedy4me
https://github.com/quynhold/Detect-CVE-2017-0144-attack
https://github.com/SaintsConnor/Exploits
https://github.com/Ali-Imangholi/EternalBlueTrojan
https://github.com/kimocoder/eternalblue
https://github.com/peterpt/eternal_scanner
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0144
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0144
http://www.securitytracker.com/id/1037991
http://www.securityfocus.com/bid/96704
http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
Details
Published: 2017-03-17
Updated: 2026-08-14
Named Vulnerability: WannaCryNamed Vulnerability: EternalBlueNamed Vulnerability: ETERNALBLUEKnown Exploited Vulnerability (KEV)
Risk Information
CVSS v2
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Severity: High
CVSS v3
Base Score: 8.8
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: High
EPSS
EPSS: 0.9923