Test ID:	1.3.6.1.4.1.25623.1.0.810698
Category:	Windows : Microsoft Bulletins
Title:	Double Pulsar Infection Detect
Summary:	This host is vulnerable to the 'Eternalblue' tool attack and is; prone to a remote code execution (RCE) vulnerability.
Description:	Summary: This host is vulnerable to the 'Eternalblue' tool attack and is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: An SMBv1 (Server Message Block 1.0) exploit that could trigger a RCE in older versions of Windows dubbed as 'ETERNALBLUE' has been discovered in latest dump of NSA Tools. One covert channel, 'double pulsar', is designed to particular for systems that are vulnerable to Eternalblue. The covert channel uses SMB features that have so far been not used, in particular, the 'Trans2' feature. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code on the affected system. Failed attacks will cause denial of service conditions. Affected Software/OS: All Windows Platforms from Windows XP through Windows 2012 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-0146 BugTraq ID: 96707 http://www.securityfocus.com/bid/96707 https://www.exploit-db.com/exploits/41891/ https://www.exploit-db.com/exploits/41987/ https://www.exploit-db.com/exploits/43970/ http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 http://www.securitytracker.com/id/1037991 Common Vulnerability Exposure (CVE) ID: CVE-2017-0147 BugTraq ID: 96709 http://www.securityfocus.com/bid/96709
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.