Intrusion.Win.CVE-2020-0796

Class: Intrusion

Description Intrusion attacks attempt to exploit vulnerable or improperly configured applications, services, and operating systems remotely through a network to achieve arbitrary code execution and perform unauthorized network activity. A successful intrusion attack can result in remote code execution on the targeted hosts.

Platform: Win

No platform description

Description

This attack is based on exploiting the CVE-2020-0796 SMBv3 vulnerability of the SMBv3 protocol in Microsoft Windows operating systems. The attacker can use this vulnerability to run arbitrary code on SMB servers and SMB clients. To attack the server, one sends a specially created package to it. As for the client, attackers have to configure a malicious SMBv3 server and persuade a user to connect to it.

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com