A penetration tester discovered a vulnerability that has the following CVEs: Which of the following CVEs should be remediated first?

The correct answer is E. CVE-2017-7494. CVE-2017-7494, known as 'SambaCry' or 'EternalRed,' is a critical remote code execution vulnerability in Samba (CVSS score 9.8/10). It allows an unauthenticated attacker to upload a shared library to a writable share and execute arbitrary code as root. It should be prioritized…

Vulnerability discovery and analysis

Question

A penetration tester discovered a vulnerability that has the following CVEs:

Which of the following CVEs should be remediated first?

Options

ACVE-2007-6750
BCVE-2011-3192
CCVE-2012-2122
DCVE-2014-0160
ECVE-2017-7494

How the community answered

(24 responses)

A
4% (1)
B
4% (1)
D
13% (3)
E
79% (19)

Explanation

CVE-2017-7494, known as 'SambaCry' or 'EternalRed,' is a critical remote code execution vulnerability in Samba (CVSS score 9.8/10). It allows an unauthenticated attacker to upload a shared library to a writable share and execute arbitrary code as root. It should be prioritized because of its high CVSS score and the severity of the impact (complete system compromise). By comparison: CVE-2007-6750 and CVE-2011-3192 are Apache DoS vulnerabilities (lower severity). CVE-2012-2122 is a MySQL authentication bypass (CVSS ~5.1). CVE-2014-0160 is the famous Heartbleed vulnerability (CVSS 7.5, information disclosure). While Heartbleed is serious, SambaCry's RCE capability and 9.8 CVSS score make it the highest priority.

Topics

#CVE#Vulnerability prioritization#Risk assessment#Remediation planning

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice