Microsoft patched it in March 2017. Two months later, WannaCry hit unpatched networks worldwide. The lessons still apply to every office network.
Publicly disclosed: 14 March 2017
On 14 March 2017 Microsoft released security bulletin MS17-010, fixing several flaws in the SMBv1 file-sharing protocol in Windows. One of them, later known through the leaked exploit “EternalBlue”, allowed remote code execution over the network without a password. In May 2017 the WannaCry ransomware used it to spread automatically from computer to computer, and in June NotPetya followed — both caused massive damage in organizations that had not installed the March update.
| CVE | Severity | Affected | Fixed in |
|---|---|---|---|
CVE-2017-0144 | Critical (remote code execution over SMBv1) | Windows XP – Windows 10 and Windows Server 2003 – 2016 with SMBv1 | MS17-010 security update (March 2017) |
The most expensive incidents often come from updates that were available but not installed.
Sources: Microsoft MS17-010, NVD CVE-2017-0144.
Need help with this? Contact CySec for a free consultation.
A newly disclosed exploit chain gives attackers root on on-premises N-central servers; attacks began hours after the proof of concept. No complete fix yet — immediate checks.
Read articleAn exploited Outlook flaw leaks NTLM password hashes from a crafted file. Microsoft fixed over 1,000 vulnerabilities this month — here is what to prioritise.
Read articleGoogle fixed a use-after-free in Chrome that is already exploited. The fix only works after the browser restarts — here is how to make sure every PC is protected.
Read articleOur engineers can review your current setup and propose concrete improvements.
