Title

Microsoft Windows SMB Server Remote Code Execution Vulnerability (MS16-114) (Cat II impact)

Discussion

Microsoft has released a security bulletin addresseing a vulnerability in Windows Server Message Block (SMB). To exploit this vulnerability, an attacker could first have to establish an authenticated SMBv1 session to the SMBv1 Server. If successfully exploited, an attacker would cause the affected system to stop responding until it is manually restarted.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-71589

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.