CVE-2020-0796HIGH
Description
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
References
http://packetstormsecurity.com/files/156732/Microsoft-Windows-SMB-3.1.1-Remote-Code-Execution.html
http://packetstormsecurity.com/files/157110/SMBv3-Compression-Buffer-Overflow.html
http://packetstormsecurity.com/files/157901/Microsoft-Windows-SMBGhost-Remote-Code-Execution.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796
Details
Source: MITRE
Published: 2020-03-12
Updated: 2020-06-11
Type: CWE-20
Risk Information
CVSS v2.0
Base Score: 7.5
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 10
Severity: HIGH
CVSS v3.0
Base Score: 10
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Impact Score: 6
Exploitability Score: 3.9
Severity: CRITICAL
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 135177 | Microsoft Windows SMBv3 Compression RCE (ADV200005)(CVE-2020-0796)(Remote) | Nessus | Windows | high |
| 134428 | KB4551762: Windows 10 Version 1903 and Windows 10 Version 1909 OOB Security Update (ADV200005)(CVE-2020-0796) | Nessus | Windows : Microsoft Bulletins | high |
| 134421 | Microsoft Windows SMBv3 Compression RCE (ADV200005)(CVE-2020-0796)(Remote) | Nessus | Windows | high |
| 134420 | Microsoft Windows SMBv3 Compression RCE (ADV200005)(CVE-2020-0796)(Deprecated) | Nessus | Windows | critical |