login
quiescence.eu
Vai al contenuto

CVE-2017-7494

Samba Remote Code Execution Vulnerability

n/a
CVSS
99.4%
EPSS (exploit prob.)
99.9%
EPSS percentile
Yes
Actively exploited
Yes
Ransomware use
2023-03-30
Added

Summary

Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

Affected software

Vendor: Samba  ·  Product: Samba

Weakness types (CWE):

CWE-94

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.