CVE-2020-1206
HIGH 7.5EPSS 10.5%
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
- CVSS v3.1
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 10.48% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2020-06-09
- Updated
- 2024-08-04
Proof-of-concept exploits (8)
- http://packetstormsecurity.com/files/158053/SMBleed-Uninitialized-Kernel-Memory-Read-Proo…
- ZecOps/CVE-2020-0796-RCE-POC571★ · 2020-06-09
- ZecOps/CVE-2020-1206-POC144★ · 2020-06-09
- datntsec/CVE-2020-12060★ · 2021-01-13
- jamf/CVE-2020-0796-RCE-POC571★ · 2020-06-09
- jamf/CVE-2020-1206-POC144★ · 2020-06-09
- manoz00/mm0★ · 2021-04-22
- zathizh/cve-796-mit0★ · 2020-06-21