What happened
Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.
Affected versions
Windows: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 41891Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)Sean Dillon2017-04-17VerifiedExploit-DB 47456DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)Metasploit2019-10-02VerifiedExploit-DB 43970Microsoft Windows - 'EternalRomance'/'EternalSynergy'/'EternalChampion' SMB Remote Code Execution (Metasploit) (MS17-010)Metasploit2018-02-05VerifiedExploit-DB 41987Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)Juan Sacco2017-05-10VerifiedPoC-in-GitHub · valarauco/wannafindSimple script using nmap to detect CVE-2017-0143 MS17-010 in your network★ 3valarauco2017-05-16CandidatePoC-in-GitHub · NatteeSetobol/Etern-blue-Windows-7-CheckerEternalBlue is a well-known SMB exploit created by the NSA to attack various versions of Windows, including Windows 7. Etern-Blue-Windows-7-Checker will basically send SMB packets to a host to see if that Windows host machine is vulnerable to the EternalBlue exploit (CVE-2017-0143).★ 7NatteeSetobol2020-10-07CandidatePoC-in-GitHub · h3x0v3rl0rd/MS17-010_CVE-2017-0143MS17-010_CVE-2017-0143★ 40h3x0v3rl0rd2021-07-08CandidatePoC-in-GitHub · SampatDhakal/Metasploit-Attack-ReportTechnical Analysis of the SMB vulnerability (CVE-2017-0143) & its impact on the vulnerable system★ 0SampatDhakal2022-05-14CandidatePoC-in-GitHub · h3x0v3rl0rd/MS17-010MS17-010 (CVE-2017-0143) - Python3 Script★ 1h3x0v3rl0rd2025-03-12CandidatePoC-in-GitHub · Mafiosohack/offensive-security-lab-1A hands-on vulnerability assessment and exploitation of a Windows 7 VM using the EternalBlue (CVE-2017-0143) exploit. Includes scanning, exploitation with Metasploit, post-exploitation, and remediation steps in a controlled lab environment.★ 0Mafiosohack2025-06-17CandidatePoC-in-GitHub · Cedric-Martz/EthernalBlue_reportThis is a security assessment report regarding the EthernalBlue vulnerability (CVE-2017-0143).★ 0Cedric-Martz2025-07-13CandidatePoC-in-GitHub · benguelmas/cve-2017-0143★ 0benguelmas2025-08-13CandidatePoC-in-GitHub · hackingyseguridad/smbSMBv1: CVE-2017-0143, gravedad 8.8, de ejecucion remota de codigo (RCE), en Windows con SMBv1 (ms17-010)★ 0hackingyseguridad2026-01-21CandidatePoC-in-GitHub · FernandoTDalcin/thm-blue-writeupWriteup da sala Blue do TryHackMe — exploração do EternalBlue (MS17-010/CVE-2017-0143).★ 0FernandoTDalcin2026-05-19CandidatePoC-in-GitHub · BlessingOlaniyan/cve-2017-0143-smbv1-analysis★ 0BlessingOlaniyan2026-10-20CandidateSploitusProof-of-concept exploit for CVE-2017-0143. CVSS 9.3.Sploitus index2026-10-20T05:24:54+00:00CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.