CyberSec.Space Logo
Back to CVE Browser

CVE-2017-0147

Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score78.1760%
EPSS Percentile90.30th
PublishedMar 17, 2017
Last ModifiedApr 22, 2026

Vulnerability Description

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."

Affected Platforms (CPE)

💻
Microsoft

Windows 10 1507

All versions
💻
Microsoft

Windows 10 1511

All versions
💻
Microsoft

Windows 10 1607

All versions
💻
Microsoft

Windows 7

All versions
💻
Microsoft

Windows 8.1

All versions
💻
Microsoft

Windows Rt 8.1

All versions
💻
Microsoft

Windows Server 2008

All versions
💻
Microsoft

Windows Server 2008

= r2
💻
Microsoft

Windows Server 2012

All versions
💻
Microsoft

Windows Server 2012

= r2
💻
Microsoft

Windows Server 2016

All versions
💻
Microsoft

Windows Vista

All versions
💻
Siemens

Acuson P300 Firmware

= 13.02
💻
Siemens

Acuson P300 Firmware

= 13.03
💻
Siemens

Acuson P300 Firmware

= 13.20
💻
Siemens

Acuson P300 Firmware

= 13.21
💻
Siemens

Acuson P500 Firmware

= va10
💻
Siemens

Acuson P500 Firmware

= vb10
💻
Siemens

Acuson Sc2000 Firmware

>= 4.0 and < 4.0e
💻
Siemens

Acuson Sc2000 Firmware

= 5.0a
💻
Siemens

Acuson X700 Firmware

= 1.0
💻
Siemens

Acuson X700 Firmware

= 1.1
💻
Siemens

Syngo Sc2000 Firmware

>= 4.0 and < 4.0e
💻
Siemens

Syngo Sc2000 Firmware

= 5.0a
💻
Siemens

Tissue Preparation System Firmware

All versions
💻
Siemens

Versant Kpcr Molecular System Firmware

All versions
💻
Siemens

Versant Kpcr Sample Prep Firmware

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html
🔗 http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html
🔗 http://www.securityfocus.com/bid/96709
🔗 http://www.securitytracker.com/id/1037991
🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf
🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf
🔗 https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0147

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...