Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-3347
HistoryJul 20, 2023 - 3:15 p.m.

Design/Logic Flaw

2023-07-2015:15:00
PRIOn knowledge base
www.prio-n.com
6
samba
smb2
packet signing
vulnerability
data integrity
man-in-the-middle

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

A vulnerability was found in Samba’s SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured “server signing = required” or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.