thoralox

EternalBlue

Last verified 2h ago

Microsoft SMBv1 remote code execution (WannaCry)

Exploited in the wild?
YES · Active in KEV
Public exploit?
YES · 188 PoCs
Patch available?
YES · Upstream & distros
Severity
8.1 HIGH
Check if you're affected Jump to fix commands

Risk signals

Known exploited
CISA KEV2022-02-10
Added Feb 10, 2022
97.4%
EPSS probability
100th percentile
PoC repos
188
CVSS
8.1

Summary

Unpatched SMBv1 on OT and legacy hosts remains a top ransomware entry point.

Fix it

Per-distro commands are being verified
Our team is confirming fixed package versions for Windows SMB. Use your distribution's security tracker in the meantime.

Related incidents

Log4Shell
10.0 Critical
CVE-2021-44228

Still the most-scanned bug on the internet. Embedded Log4j in vendor appliances keeps it alive.

CISA KEVPatch available
Apache Traversal
9.8 Critical
CVE-2021-41773

Encoded dot segments escape DocumentRoot; with mod_cgi enabled, leads to RCE.

CISA KEVPatch available
CVE-2019-11043
9.8 Critical
CVE-2019-11043

Specific nginx fastcgi_split_path_info configs allow RCE in PHP-FPM.

CISA KEVPatch available