# CVE-2017-0146: Windows SMB Remote Code Execution Vulnerability CVE-2017-0146 is fixed in 26 products on 1 platform, first by KB4013198, released March 14, 2017. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on March 25, 2022, with known ransomware use. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/cve/CVE-2017-0146 - Priority: Patch now - CVSS: 8.1 (Critical) - EPSS: 0.8986 - CISA KEV: listed Mar 25, 2022, federal due date Apr 15, 2022, known ransomware use - Exploited (vendor report): no - Publicly disclosed: no - Vendor exploitability assessment: Exploitation More Likely - Published: Mar 14, 2017 - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0146 ## Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.

To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.

The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.

## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Microsoft | Windows 10 Version 1511 for 32-bit Systems | 10586.839 | [KB4013198](https://patchblox.com/security/data/fix/microsoft/kb4013198.md) | Mar 14, 2017 | | Microsoft | Windows 10 Version 1511 for x64-based Systems | 10586.839 | [KB4013198](https://patchblox.com/security/data/fix/microsoft/kb4013198.md) | Mar 14, 2017 | | Microsoft | Windows 10 Version 1607 for 32-bit Systems | 14393.953 | [KB4013429](https://patchblox.com/security/data/fix/microsoft/kb4013429.md) | Mar 14, 2017 | | Microsoft | Windows 10 Version 1607 for x64-based Systems | 14393.953 | [KB4013429](https://patchblox.com/security/data/fix/microsoft/kb4013429.md) | Mar 14, 2017 | | Microsoft | Windows 10 for 32-bit Systems | 10240.17319 | [KB4012606](https://patchblox.com/security/data/fix/microsoft/kb4012606.md) | Mar 14, 2017 | | Microsoft | Windows 10 for x64-based Systems | 10240.17319 | [KB4012606](https://patchblox.com/security/data/fix/microsoft/kb4012606.md) | Mar 14, 2017 | | Microsoft | Windows 7 for 32-bit Systems Service Pack 1 | | [KB4012215](https://patchblox.com/security/data/fix/microsoft/kb4012215.md) | Mar 14, 2017 | | Microsoft | Windows 7 for 32-bit Systems Service Pack 1 | | [KB4012212](https://patchblox.com/security/data/fix/microsoft/kb4012212.md) | Mar 14, 2017 | | Microsoft | Windows 7 for x64-based Systems Service Pack 1 | | [KB4012215](https://patchblox.com/security/data/fix/microsoft/kb4012215.md) | Mar 14, 2017 | | Microsoft | Windows 7 for x64-based Systems Service Pack 1 | | [KB4012212](https://patchblox.com/security/data/fix/microsoft/kb4012212.md) | Mar 14, 2017 | | Microsoft | Windows 8.1 for 32-bit systems | | [KB4012213](https://patchblox.com/security/data/fix/microsoft/kb4012213.md) | Mar 14, 2017 | | Microsoft | Windows 8.1 for 32-bit systems | | [KB4012216](https://patchblox.com/security/data/fix/microsoft/kb4012216.md) | Mar 14, 2017 | | Microsoft | Windows 8.1 for x64-based systems | | [KB4012213](https://patchblox.com/security/data/fix/microsoft/kb4012213.md) | Mar 14, 2017 | | Microsoft | Windows 8.1 for x64-based systems | | [KB4012216](https://patchblox.com/security/data/fix/microsoft/kb4012216.md) | Mar 14, 2017 | | Microsoft | Windows RT 8.1 | | [KB4012216](https://patchblox.com/security/data/fix/microsoft/kb4012216.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 | | [KB4012215](https://patchblox.com/security/data/fix/microsoft/kb4012215.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 | | [KB4012212](https://patchblox.com/security/data/fix/microsoft/kb4012212.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | | [KB4012215](https://patchblox.com/security/data/fix/microsoft/kb4012215.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | | [KB4012212](https://patchblox.com/security/data/fix/microsoft/kb4012212.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 for 32-bit Systems Service Pack 2 | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 for Itanium-Based Systems Service Pack 2 | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 for x64-based Systems Service Pack 2 | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | | Microsoft | Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 | | [KB4012217](https://patchblox.com/security/data/fix/microsoft/kb4012217.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 | | [KB4012214](https://patchblox.com/security/data/fix/microsoft/kb4012214.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 (Server Core installation) | | [KB4012217](https://patchblox.com/security/data/fix/microsoft/kb4012217.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 (Server Core installation) | | [KB4012214](https://patchblox.com/security/data/fix/microsoft/kb4012214.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 R2 | | [KB4012213](https://patchblox.com/security/data/fix/microsoft/kb4012213.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 R2 | | [KB4012216](https://patchblox.com/security/data/fix/microsoft/kb4012216.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 R2 (Server Core installation) | | [KB4012213](https://patchblox.com/security/data/fix/microsoft/kb4012213.md) | Mar 14, 2017 | | Microsoft | Windows Server 2012 R2 (Server Core installation) | | [KB4012216](https://patchblox.com/security/data/fix/microsoft/kb4012216.md) | Mar 14, 2017 | | Microsoft | Windows Server 2016 | 14393.953 | [KB4013429](https://patchblox.com/security/data/fix/microsoft/kb4013429.md) | Mar 14, 2017 | | Microsoft | Windows Server 2016 (Server Core installation) | 14393.953 | [KB4013429](https://patchblox.com/security/data/fix/microsoft/kb4013429.md) | Mar 14, 2017 | | Microsoft | Windows Vista Service Pack 2 | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | | Microsoft | Windows Vista x64 Edition Service Pack 2 | | [KB4012598](https://patchblox.com/security/data/fix/microsoft/kb4012598.md) | Mar 14, 2017 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo