CVE-2020-1206
HIGH EXPLOITEDMicrosoft SMBv3 - Info Disclosure
Title source: llmDescription
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
Exploits (5)
nomisec
by Info-Security-Solution-Kolkata · poc
https://github.com/Info-Security-Solution-Kolkata/Smbleed-CVE-2020-1206-Exploit
nomisec
by Info-Security-Solution-Kolkata · poc
https://github.com/Info-Security-Solution-Kolkata/CVE-2020-1206-Exploit
Scores
CVSS v3
7.5
EPSS
0.3125
EPSS Percentile
96.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
VulnCheck KEV
2023-12-20
CWE
CWE-908
Status
published
Products (6)
microsoft/windows_10
1903
microsoft/windows_10
1909
microsoft/windows_10
2004
microsoft/windows_server_2016
1903
microsoft/windows_server_2016
1909
microsoft/windows_server_2016
2004
Published
Jun 09, 2020
Tracked Since
Feb 18, 2026