CVE-2019-0633: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution…

High severity · published Mar 5, 2019

CVE-2019-0633

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution…

8.8

CVSS

13%

EPSS

On KEV

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)13.0% · higher than 96% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Windows · Microsoft

8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for 32-bit Systems; +12 more · source: vendor, NVD

Windows 7 · Microsoft

All versions, or not specified · source: NVD

Windows 8.1 · Microsoft

All versions, or not specified · source: NVD

Windows RT 8.1 · Microsoft

All versions, or not specified · source: NVD

Windows Server 2008 · Microsoft

r2; r2 · source: NVD

Windows Server 2012 · Microsoft

r2 · source: NVD

Windows Server 2016 · Microsoft

1709; 1803 · source: NVD