Cyber Resilience

CVE-2017-0143

Siemens Acuson P300 Firmware 13.02 … 13.21

CISA KEVActive ExploitationEUVD ExploitedPublic PoCRansomware-linked
Published
17 March 2017
Modified
22 April 2026
KEV Added
03 November 2021
Patch / advisory
View advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.93 99.8th percentile
Risk Priority 90 floored blend · peak EPSS

Summary

CVE-2017-0143 is a high-severity an unspecified weakness vulnerability in Siemens Acuson P300 Firmware. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2017-0143 resides in the SMBv1 server implementation across multiple Microsoft Windows releases, specifically Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold/1511/1607, and Windows Server 2016. It is triggered by specially crafted network packets that result in remote code execution and is distinct from the related issues tracked as CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

An unauthenticated remote attacker with network connectivity to an affected SMBv1 endpoint can send malicious packets to execute arbitrary code, obtaining the same privileges as the SMB service and thereby enabling full system compromise.

Public references such as the Siemens SSA-701903 advisory and entries on SecurityFocus and SecurityTracker outline vendor guidance and patch availability for the affected platforms, while PacketStorm disclosures describe neutralization techniques for associated DOUBLEPULSAR payloads.

The listed references further document publicly available exploit code and payload execution artifacts tied to this SMBv1 flaw.

EU & UK References

Vulnerability Data

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016…

more

allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

CWE(s)
NVD-CWE-noinfo
KEV Date Added
03 November 2021

Related Threats

CVEs Like This One

CVE-2017-0145Same product: Microsoft Server Message Blockboth on KEV
CVE-2017-0146Same product: Microsoft Server Message Blockboth on KEV
CVE-2017-0144Same product: Microsoft Server Message Blockboth on KEV
CVE-2017-0148Same product: Microsoft Server Message Blockboth on KEV
CVE-2017-0147Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0199Same product: Microsoft Windows 7both on KEV
CVE-2017-0001Same product: Microsoft Windows 10 1507both on KEV
CVE-2016-7256Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0005Same product: Microsoft Windows 10 1507both on KEV
CVE-2016-7255Same product: Microsoft Windows 10 1507both on KEV

Affected Assets

microsoft
server message block
1.0
philips
intellispace portal
7.0, 8.0
siemens
acuson p300 firmware
13.02, 13.03, 13.20, 13.21
siemens
acuson p500 firmware
va10, vb10
siemens
acuson sc2000 firmware
5.0a · 4.0 — 4.0e
siemens
acuson x700 firmware
1.0, 1.1
siemens
syngo sc2000 firmware
5.0a · 4.0 — 4.0e
siemens
tissue preparation system firmware
all versions
siemens
versant kpcr molecular system firmware
all versions
siemens
versant kpcr sample prep firmware
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References