CVE-2020-0796criticalbajo ataqueransomwareCWE-119

CVE-2020-0796: fallo crítico en Microsoft Windows 10 Version 1903 for 32-bit…

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Windows Server+ Monitorear Windows

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 10epss 100%
de la publicación al armael mismo día
Publicada en NVD12 mar
1ª PoC19 nov
metasploit+1d
CISA KEV+700d
Acción exigida por CISAplazo federal: 2022-08-10

Apply updates per vendor instructions.

En resumen

Una vulnerabilidad crítica en el protocolo SMBv3 de Windows (utilizado para compartición de archivos) permite que atacantes ejecuten código malicioso de forma remota en computadoras vulnerables sin necesidad de permisos especiales. Es especialmente peligrosa porque SMBv3 se usa ampliamente en redes y el ataque requiere mínima interacción.

Detalle técnico

Vulnerabilidad de ejecución remota de código en el protocolo SMBv3 (CWE-119: desbordamiento de búfer) activada mediante solicitudes de red especialmente diseñadas. Vector de ataque es por red sin autenticación requerida; los sistemas afectados procesan automáticamente paquetes SMBv3 maliciosos que corrompen memoria y resultan en ejecución de código arbitrario con privilegios del sistema.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Microsoft · Windows 10 Version 1903 for 32-bit SystemsMicrosoft · Windows 10 Version 1903 for ARM64-based SystemsMicrosoft · Windows 10 Version 1903 for x64-based SystemsMicrosoft · Windows 10 Version 1909 for 32-bit SystemsMicrosoft · Windows 10 Version 1909 for ARM64-based SystemsMicrosoft · Windows 10 Version 1909 for x64-based SystemsMicrosoft · Windows Server, version 1903 (Server Core installation)Microsoft · Windows Server, version 1909 (Server Core installation)
PoCs públicas encontradas — 163
exploitdbwww.exploit-db.com/exploits/48537no verificadoexploitdbwww.exploit-db.com/exploits/48267no verificadoexploitdbwww.exploit-db.com/exploits/48216no verificadogithubgithub.com/danigargu/CVE-2020-0796★ 1359githubgithub.com/ly4k/SMBGhost★ 723githubgithub.com/jamf/CVE-2020-0796-RCE-POC★ 569githubgithub.com/Barriuso/SMBGhost_AutomateExploitation★ 361githubgithub.com/eerykitty/CVE-2020-0796-PoC★ 332githubgithub.com/jamf/CVE-2020-0796-LPE-POC★ 244githubgithub.com/Rvn0xsy/CVE_2020_0796_CNA★ 74githubgithub.com/rsmudge/CVE-2020-0796-BOF★ 70githubgithub.com/jiansiting/CVE-2020-0796★ 65githubgithub.com/ioncodes/SMBGhost★ 57githubgithub.com/k8gege/PyLadon★ 53githubgithub.com/jamf/SMBGhost-SMBleed-scanner★ 44githubgithub.com/eastmountyxz/CVE-2020-0796-SMB★ 33githubgithub.com/T13nn3s/CVE-2020-0796★ 28githubgithub.com/maxpl0it/Unauthenticated-CVE-2020-0796-PoC★ 22githubgithub.com/Almorabea/SMBGhost-LPE-Metasploit-Module★ 20githubgithub.com/gabimarti/SMBScanner★ 19githubgithub.com/0x25bit/CVE-2020-0796-PoC★ 18githubgithub.com/ButrintKomoni/cve-2020-0796★ 17githubgithub.com/f1tz/CVE-2020-0796-LPE-EXP★ 17githubgithub.com/GuoKerS/aioScan_CVE-2020-0796★ 15githubgithub.com/w1ld3r/SMBGhost_Scanner★ 14githubgithub.com/joaozietolie/CVE-2020-0796-Checker★ 14githubgithub.com/dickens88/cve-2020-0796-scanner★ 14githubgithub.com/thelostworldFree/CVE-2020-0796★ 11githubgithub.com/jiansiting/CVE-2020-0796-Scanner★ 9githubgithub.com/technion/DisableSMBCompression★ 9githubgithub.com/0xeb-bp/cve-2020-0796★ 7githubgithub.com/dungnm24/CVE-2020-0796★ 6githubgithub.com/vysecurity/CVE-2020-0796★ 5githubgithub.com/orangmuda/CVE-2020-0796★ 5githubgithub.com/wneessen/SMBCompScan★ 4githubgithub.com/tango-j/CVE-2020-0796★ 4githubgithub.com/exp-sky/CVE-2020-0796★ 3githubgithub.com/sujitawake/smbghost★ 3githubgithub.com/codewithpradhan/SMBGhost-CVE-2020-0796-★ 3githubgithub.com/DannyRavi/nmap-scripts★ 2githubgithub.com/laolisafe/CVE-2020-0796★ 2githubgithub.com/MasterSploit/LPE---CVE-2020-0796★ 2githubgithub.com/Jagadeesh7532/-CVE-2020-0796-SMBGhost-Windows-10-SMBv3-Remote-Code-Execution-Vulnerability★ 2githubgithub.com/TinToSer/CVE-2020-0796-LPE★ 2githubgithub.com/Anonimo501/SMBGhost_CVE-2020-0796_checker★ 2githubgithub.com/LabDookhtegan/CVE-2020-0796-EXP★ 1githubgithub.com/BinaryShadow94/SMBv3.1.1-scan---CVE-2020-0796★ 1githubgithub.com/awareseven/eternalghosttest★ 1githubgithub.com/cory-zajicek/CVE-2020-0796-DoS★ 1githubgithub.com/julixsalas/CVE-2020-0796★ 1githubgithub.com/OldDream666/cve-2020-0796★ 1githubgithub.com/ran-sama/CVE-2020-0796★ 1githubgithub.com/bsec404/CVE-2020-0796★ 1githubgithub.com/AdamSonov/smbGhostCVE-2020-0796★ 1githubgithub.com/SEHandler/CVE-2020-0796★ 1githubgithub.com/F6JO/CVE-2020-0796-Batch-scanning★ 1githubgithub.com/netscylla/SMBGhost★ 1githubgithub.com/Dhoomralochana/Scanners-for-CVE-2020-0796-Testing★ 1githubgithub.com/cybermads/CVE-2020-0796★ 1githubgithub.com/arzuozkan/CVE-2020-0796★ 1githubgithub.com/1stPeak/CVE-2020-0796-Scanner★ 1githubgithub.com/datntsec/CVE-2020-0796★ 1githubgithub.com/1060275195/SMBGhost★ 0githubgithub.com/ysyyrps123/CVE-2020-0796★ 0githubgithub.com/TweatherQ/CVE-2020-0796★ 0githubgithub.com/section-c/CVE-2020-0796★ 0githubgithub.com/hungdnvp/POC-CVE-2020-0796★ 0githubgithub.com/monjheta/CVE-2020-0796★ 0githubgithub.com/esmwaSpyware/DoS-PoC-for-CVE-2020-0796-SMBGhost-★ 0githubgithub.com/nyambiblaise/Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE★ 0githubgithub.com/thai1012/cve-2020-0796★ 0githubgithub.com/p4ncontomat3/smbghost★ 0githubgithub.com/tripledd/cve-2020-0796-vuln★ 0githubgithub.com/kn6869610/CVE-2020-0796★ 0githubgithub.com/Almorabea/SMBGhost-WorkaroundApplier★ 0githubgithub.com/wsfengfan/CVE-2020-0796★ 0githubgithub.com/bacth0san96/SMBGhostScanner★ 0githubgithub.com/halsten/CVE-2020-0796★ 0githubgithub.com/ysyyrps123/CVE-2020-0796-exp★ 0githubgithub.com/Opensitoo/cve-2020-0796★ 0githubgithub.com/Justjeff211/conti-ransomware-writeup★ 0githubgithub.com/tdevworks/CVE-2020-0796-SMBGhost-Exploit-Demo★ 0githubgithub.com/xax007/CVE-2020-0796-Scanner★ 0githubgithub.com/UraSecTeam/smbee★ 0githubgithub.com/intelliroot-tech/cve-2020-0796-Scanner★ 0githubgithub.com/AaronCaiii/CVE-2020-0796-POC★ 0githubgithub.com/Murasame-nc/CVE-2020-0796-LPE-POC★ 0githubgithub.com/lisinan988/CVE-2020-0796-exp★ 0githubgithub.com/vsai94/ECE9069_SMBGhost_Exploit_CVE-2020-0796-★ 0githubgithub.com/krizzz07/CVE-2020-0796★ 0githubgithub.com/z3ena/Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities★ 0githubgithub.com/maqeel-git/CVE-2020-0796★ 0vulncheckvulncheck.com/xdb/14a46f453670no verificadovulncheckvulncheck.com/xdb/2a4b6e1593ebno verificadovulncheckvulncheck.com/xdb/0dcd49541f47no verificadovulncheckvulncheck.com/xdb/4e6bc5ec8634no verificadovulncheckvulncheck.com/xdb/5f4027f27daeno verificadovulncheckvulncheck.com/xdb/a84af6033bbano verificadovulncheckvulncheck.com/xdb/21b85fcc4fefno verificadovulncheckvulncheck.com/xdb/132b45db5c90no verificadovulncheckvulncheck.com/xdb/962a618f3543no verificadovulncheckvulncheck.com/xdb/cf4d2847f48ano verificadovulncheckvulncheck.com/xdb/f8f7a66ca404no verificadovulncheckvulncheck.com/xdb/1bd0e82ed8eeno verificadovulncheckvulncheck.com/xdb/189b546ce23dno verificadovulncheckvulncheck.com/xdb/1e6f8ca038f7no verificadovulncheckvulncheck.com/xdb/673033cc1f2dno verificadovulncheckvulncheck.com/xdb/9e0eebcc0239no verificadovulncheckvulncheck.com/xdb/9f1dbe33c767no verificadovulncheckvulncheck.com/xdb/4b583097e51ano verificadovulncheckvulncheck.com/xdb/484b2a81c82eno verificadovulncheckvulncheck.com/xdb/1f736df77952no verificadovulncheckvulncheck.com/xdb/424a6065b5a6no verificadovulncheckvulncheck.com/xdb/f1c35a49bda4no verificadovulncheckvulncheck.com/xdb/f25ef6c781a3no verificadovulncheckvulncheck.com/xdb/33fb0416877cno verificadovulncheckvulncheck.com/xdb/d44cedf42a97no verificadovulncheckvulncheck.com/xdb/059158002b34no verificadovulncheckvulncheck.com/xdb/c443f592dacdno verificadovulncheckvulncheck.com/xdb/bbb07a6476f6no verificadocve_referencepacketstormsecurity.com/files/158054/SMBleed-SMBGhost-Pre-Authentication-Remote-Code-Execution-Proof-Of-Concept.htmlno verificadovulncheckvulncheck.com/xdb/19e081f7a0e0no verificadovulncheckvulncheck.com/xdb/ac5de3e67dd5no verificadovulncheckvulncheck.com/xdb/28ef5a320ff6no verificadovulncheckvulncheck.com/xdb/1433f57a34a7no verificadocve_referencepacketstormsecurity.com/files/157110/SMBv3-Compression-Buffer-Overflow.htmlno verificadovulncheckvulncheck.com/xdb/db287bfd1300no verificadovulncheckvulncheck.com/xdb/002285bd34cfno verificadocve_referencepacketstormsecurity.com/files/156732/Microsoft-Windows-SMB-3.1.1-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/c61e689a70b5no verificadovulncheckvulncheck.com/xdb/935c9e284cc4no verificadovulncheckvulncheck.com/xdb/c349096df32eno verificadovulncheckvulncheck.com/xdb/8055bf519ef5no verificadovulncheckvulncheck.com/xdb/92253f0cfed5no verificadovulncheckvulncheck.com/xdb/5e7a0bf92c1ano verificadovulncheckvulncheck.com/xdb/405831a8e860no verificadovulncheckvulncheck.com/xdb/234a8c77ec20no verificadocve_referencepacketstormsecurity.com/files/156731/CoronaBlue-SMBGhost-Microsoft-Windows-10-SMB-3.1.1-Proof-Of-Concept.htmlno verificadocve_referencepacketstormsecurity.com/files/156980/Microsoft-Windows-10-SMB-3.1.1-Local-Privilege-Escalation.htmlno verificadocve_referencepacketstormsecurity.com/files/157901/Microsoft-Windows-SMBGhost-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/1fe25bc46b28no verificadovulncheckvulncheck.com/xdb/2705744907eeno verificadovulncheckvulncheck.com/xdb/35944ecc6741no verificadovulncheckvulncheck.com/xdb/df0832d0144eno verificadovulncheckvulncheck.com/xdb/42d4e59819e1no verificadovulncheckvulncheck.com/xdb/0783c8074cffno verificadovulncheckvulncheck.com/xdb/17f7ca6e1bfano verificadovulncheckvulncheck.com/xdb/a08cd7c0ec40no verificadovulncheckvulncheck.com/xdb/6d070666358ano verificadovulncheckvulncheck.com/xdb/c489f75bf99dno verificadovulncheckvulncheck.com/xdb/d7d5d53f4beano verificadovulncheckvulncheck.com/xdb/3df354d72935no verificadovulncheckvulncheck.com/xdb/33e62c3dd628no verificadovulncheckvulncheck.com/xdb/216af6a16e50no verificadovulncheckvulncheck.com/xdb/a788d7636e90no verificadovulncheckvulncheck.com/xdb/0edf8728bb5fno verificadovulncheckvulncheck.com/xdb/5f415b7a9395no verificadovulncheckvulncheck.com/xdb/04badb202b58no verificadovulncheckvulncheck.com/xdb/d69aadafc43ano verificadovulncheckvulncheck.com/xdb/b8b6072526a3no verificadovulncheckvulncheck.com/xdb/ff75d491e221no verificadovulncheckvulncheck.com/xdb/48181658a679no verificadovulncheckvulncheck.com/xdb/fff5ddf87547no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Microsoft Windows 10 Version 1903 for 32-bit…

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-0601HIGHCVE-2020-0601EPSS 89.1%KEVCVE-2020-0938HIGHCVE-2020-0938EPSS 69.0%KEVCVE-2020-1020HIGHCVE-2020-1020EPSS 65.0%KEVCVE-2020-1054HIGHWin32k Elevation of Privilege VulnerabilityEPSS 53.9%KEVCVE-2020-0787HIGHCVE-2020-0787EPSS 42.5%KEVCVE-2020-1464HIGHWindows Spoofing VulnerabilityEPSS 38.9%KEV