Vulnerability Intelligence

🛡 CVE-2017-7494

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2023-04-20. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

🏹 Attributed exploitation

Malware / ransomware (KEV): ransomware (KEV-flagged)

🔗 External references & OSINT

🔄 Internal pivots & actions

🛡 Add to case

🗃 Data Management

🧩 Advanced Capabilities