Samba Vulnerability: Dancing Its Way to a Network Near You

Summary: Cisco Talos reported a new Samba vulnerability, CVE-2017-7494, that lets a user upload a shared library to a writeable share on a vulnerable Samba server and have the server execute the uploaded file, affecting all versions of Samba 3.5.0 (released March 2010) and later. A patch has been released, and a mitigation exists in Samba's own configuration: adding "nt pipe support = no" to the global section of smb.conf and restarting the service.
Key Takeaway: A metasploit one-liner can trigger this, and proof-of-concept code is already public, so the gap between disclosure and exploitation is short for every NAS device and server still running an unpatched Samba.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2017-7494
Related: CVE-2017-7494: Samba Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 30, 2023
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026