Vulnerability Details : CVE-2017-12150

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
Published 2018-07-26 18:29:00
Updated 2022-08-29 20:43:05
Source Red Hat, Inc.
View at NVD,   CVE.org

Products affected by CVE-2017-12150

Threat overview for CVE-2017-12150

Top countries where our scanners detected CVE-2017-12150
Top open port discovered on systems with this issue 445
IPs affected by CVE-2017-12150 218,635
Threat actors abusing to this issue? Yes
Find out if you* are affected by CVE-2017-12150!
*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2017-12150

EPSS FAQ
22.35%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-12150

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
5.8
 MEDIUM AV:N/AC:M/Au:N/C:P/I:P/A:N
8.6
4.9
 NIST
7.4
 HIGH CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
2.2
5.2
 Red Hat, Inc.
7.4
 HIGH CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
2.2
5.2
 NIST

CWE ids for CVE-2017-12150

  • The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.
    Assigned by: secalert@redhat.com (Secondary)

References for CVE-2017-12150

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close