{
  "cveId": "CVE-2017-11782",
  "url": "https://patchblox.com/security/cve/CVE-2017-11782",
  "summary": "CVE-2017-11782 is fixed in 4 products on 1 platform, first by KB4041691, released October 10, 2017. It is not reported as exploited, but the vendor rates exploitation more likely. Patch Radar priority: Urgent.",
  "title": "Windows SMB Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003EAn elevation of privilege vulnerability exists in the default Windows SMB Server configuration which allows anonymous users to remotely access certain named pipes that are also configured to allow anonymous access to users who are logged on locally. An unauthenticated attacker who successfully exploits this configuration error could remotely send specially crafted requests to certain services that accept requests via named pipes.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker would have to be able to send SMB messages to an impacted Windows SMB Server for which the attacker does not already have valid credentials, and then identify an unpatched vulnerability in the handling of named pipe requests in one of the impacted services.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by correcting the Windows SMB Server default configuration.\u003C/p\u003E",
  "published": "2017-10-10T07:00:00Z",
  "severity": "Important",
  "cvss": 7.5,
  "epss": 0.0117,
  "epssPercentile": 0.67609,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation More Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-11782",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for 32-bit Systems",
      "fixedVersion": "14393.1770",
      "fix": "KB4041691",
      "url": "https://patchblox.com/security/fix/microsoft/kb4041691",
      "released": "2017-10-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for x64-based Systems",
      "fixedVersion": "14393.1770",
      "fix": "KB4041691",
      "url": "https://patchblox.com/security/fix/microsoft/kb4041691",
      "released": "2017-10-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016",
      "fixedVersion": "14393.1770",
      "fix": "KB4041691",
      "url": "https://patchblox.com/security/fix/microsoft/kb4041691",
      "released": "2017-10-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016 (Server Core installation)",
      "fixedVersion": "14393.1770",
      "fix": "KB4041691",
      "url": "https://patchblox.com/security/fix/microsoft/kb4041691",
      "released": "2017-10-10T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}