CVE-2017-8550

EPSS 22.4%

Vexday Risk Score

28Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 22.4%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

15 Jun 2017Published on NVD

12 Jul 2017Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remote Code Execution Vulnerability".

Affected products

Microsoft Corporation · Skype for Business

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/42316/unverified exploitdbwww.exploit-db.com/exploits/42316unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550 https://www.exploit-db.com/exploits/42316/http://www.securityfocus.com/bid/98916