CVE-2020-1206

High

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain…

microsoft·CWE-908·Published 2020-06-09

CVSS

7.5

EPSS

0.10

KEV

Exploits

cve.orgen

218 chars

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.

NVDen

218 chars

NVDes

268 chars

Se presenta una vulnerabilidad de divulgación de información en la manera en que el protocolo Microsoft Server Message Block versión 3.1.1 (SMBv3) maneja determinadas peticiones, también se conoce como "Windows SMBv3 Client/Server Information Disclosure Vulnerability"

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N