Detections
Analytics
CVE-2017-7494
critical
Description
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
From the Tenable Blog
Detecting SambaCry CVE-2017-7494
Published: 2017-05-26
We’ve seen several critical vulnerabilities lately. First there was WannaCry, and then WannaCry 2.0 (EternalRocks), and now do we have WannaCry 3.0? Well, not really.
References
https://www.exploit-db.com/exploits/42084/
https://www.exploit-db.com/exploits/42060/
https://security.netapp.com/advisory/ntap-20170524-0001/
https://security.gentoo.org/glsa/201805-07
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03759en_us
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us
https://access.redhat.com/errata/RHSA-2017:1390
https://access.redhat.com/errata/RHSA-2017:1273
https://access.redhat.com/errata/RHSA-2017:1272
https://access.redhat.com/errata/RHSA-2017:1271
https://access.redhat.com/errata/RHSA-2017:1270
http://www.securitytracker.com/id/1038552
https://github.com/RenatoAntunovic/cve-metasploit-skeniranje
https://github.com/mukidulislamzihad/m2-vulnerability-assessment
https://github.com/YonLiud/CVE-2017-7494
https://github.com/krish-achanta/vuln-validator
https://github.com/Retr0wq/network-scanner
https://github.com/Nnamdi489/vulnerability-assessment-lab
https://github.com/owlsecx/OSpecter
https://github.com/Deloney-code/AI-Powered-Red-Team-Automation
https://github.com/Zanex360/cdt-vulnsamba-deploy
https://github.com/Zanex360/cdt-samba-deploy
https://github.com/Neelesh707/Security-writeups
https://github.com/hacksudo/samba-vuln-checker
https://github.com/sudlit/CVE-2017-7494
https://github.com/ManoJ9082/Vulnerability-Assessment-using-Tenable-Nessus
https://github.com/HariCyber-Sec/hackviser-cve-labs
https://github.com/LyticOnaope/ZHVA
https://github.com/Live-Hack-CVE/CVE-2017-7494
https://github.com/d3fudd/CVE-2017-7494_SambaCry
https://github.com/caique-garbim/CVE-2017-7494_SambaCry
https://github.com/00mjk/exploit-CVE-2017-7494
https://github.com/eulercode/exploit-CVE-2017-7494
https://github.com/elellacode/exploit-CVE-2017-7494
https://github.com/adjaliya/-CVE-2017-7494-Samba-Exploit-POC
https://github.com/I-Rinka/BIT-EternalBlue-for-macOS_Linux
https://github.com/m4udSec/noSAMBAnoCRY-CVE-2017-7494
https://github.com/joxeankoret/CVE-2017-7494
https://github.com/brianwrf/SambaHunter
https://github.com/Waffles-2/SambaCry
https://github.com/opsxcq/exploit-CVE-2017-7494
https://www.samba.org/samba/security/CVE-2017-7494.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7494
Details
Published: 2017-05-30
Updated: 2026-06-17
Named Vulnerability: SambacryNamed Vulnerability: EternalRedKnown Exploited Vulnerability (KEV)
Risk Information
CVSS v2
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
CVSS v3
Base Score: 9.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: Critical
EPSS
EPSS: 0.99448