CVE-2020-1206
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
- Microsoft Windows 10
- = 1903, 1909, 2004
- Microsoft Windows Server 2016
- = 1903, 1909, 2004
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 9.5% (95th percentile)
- Weakness
- CWE-908
- NVD status
- Modified
- Published
- 2020-06-09
CVE-2020-1206 at NVD
11 known exploits for CVE-2020-1206
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2020-1206-POC
CVE-2020-1206
SMBGhost-SMBleed-scanner
Exploit for CVE-2020-1189
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
Exploit for Use of Uninitialized Resource in Microsoft
Exploit for Use of Uninitialized Resource in Microsoft