CVE-2020-1206
HIGH EXPLOITEDWindows 10 and Windows Server 2016 - Information Disclosure via SMBv3 Uninitialized Memory Read
Title source: llmExploitation Summary
CVE-2020-1206 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including jamf, datntsec.
AI-analyzed exploit summary This repository contains PowerShell scripts demonstrating exploitation of CVE-2020-1206, a vulnerability in Microsoft Windows. The scripts include various administrative tasks such as adding users to local groups, creating DFS folders, and adding printers, which can be leveraged for privilege escalation or lateral movement.
Description
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
Exploits (3)
This repository contains PowerShell scripts demonstrating exploitation of CVE-2020-1206, a vulnerability in Microsoft Windows. The scripts include various administrative tasks such as adding users to local groups, creating DFS folders, and adding printers, which can be leveraged for privilege escalation or lateral movement.
This repository contains a detailed writeup in Vietnamese explaining the CVE-2020-1206 (SMBleed) vulnerability, which allows information leakage in the SMB protocol. It describes how the vulnerability can be exploited to leak kernel memory addresses and potentially combined with CVE-2020-0796 (SMBGhost) for remote code execution.
This repository contains functional PowerShell scripts demonstrating CVE-2020-1206, a vulnerability in Microsoft Windows. The scripts include various administrative tasks that could be exploited to manipulate system configurations, user permissions, and network settings.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N