CVE-2017-0021

Critical

Published: 17/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, allowing attackers to execute arbitrary code on a target OS.

Risk Assessment

Exploitation of this vulnerability could lead to system takeover, posing a significant security threat to the organization.

Recommendation

It is recommended to update systems to the latest versions that include security patches addressing this vulnerability.

Original NVD description (English source)

Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V System Data Structure Vulnerability." This vulnerability is different from that described in CVE-2017-0095.