H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2020-0796

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

Vulnerability
TypeVulnerability
External ID—
First seen2022-02-10
Last seen2022-02-10

Confidence

—

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMicrosoft SMBv3
Added2022-02-10
Due date2022-08-10
13 recorded

Relationships

mitigates
from Remediate CVE-2020-0796
Mitigation
related-to
to Buffer Manipulation
Technique
related-to
to Buffer Overflow in an API Call
Technique
related-to
to Buffer Overflow in Local Command-Line Utilities
Technique
related-to
to Buffer Overflow via Environment Variables
Technique
related-to
to Buffer Overflow via Parameter Expansion
Technique
related-to
to Buffer Overflow via Symbolic Links
Technique
related-to
to Client-side Injection-induced Buffer Overflow
Technique
related-to
to Filter Failure through Buffer Overflow
Technique
related-to
to MIME Conversion
Technique
related-to
to Overflow Binary Resource File
Technique
related-to
to Overflow Buffers
Technique
related-to
to Overflow Variables and Tags
Technique
2 external

References

nvd
CVE-2020-0796
open
cwe
CWE-119
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance