PT-2019-1413 · Microsoft · Smbv2+1

Publicado 2019-02-12 · Atualizado 2026-03-01 · CVE-2019-0630

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block 2.0 (SMBv2) (affected versions not specified)

Description A remote code execution issue exists in the way the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests. This issue is related to unsafe privilege management. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending a specially crafted packet to the SMBv2 server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Privilege Management

Enumeração de Fraquezas

CWE-19

CWE-269

Identificadores relacionados

BDU:2019-00795

CVE-2019-0630

Produtos afetados

Smbv2

Windows

Referências · 8

• http://securityfocus.com/bid/106876 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0630 · Aviso do Fabricante
• https://securityfocus.com/bid/106876 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0630 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-0630 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00795 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-0630 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0630 · Aviso do Fabricante