OMENWAVE modelled vulnerability-chaining pathways

CVE-2017-0147

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."

7.5

CVSS High

99.7%

EPSS p100

YES

In CISA KEV

YES

Ransomware-linked

Data as of 2 Nov 2026 · NVD, CISA KEV, EPSS

Why chaining, at machine speed

Defenders still triage vulnerabilities one CVE at a time, while increasingly automated attackers combine them at machine speed. Omenwave models the plausible pathways by which this CVE could be chained with others — surfacing them for research and awareness, with evidence for each step.

Modelled capability profile

Kill-chain stage: RECON
Requires: NONE access, NETWORK vector
Grants: NONE access
Capabilities: information disclosure
Model confidence: medium · CVSS 3.1

Top plausible next hops

CVE-2021-34527RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who s…

CVE-2017-0144RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…

CVE-2017-0143RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…

CVE-2017-0145RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…

CVE-2017-0146RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…

Open in the interactive explorer →

Embed this snapshot

Paste this into a blog post or report — it renders a compact, exploit-free chain snapshot.

<iframe src="https://omenwave.com/embed/CVE-2017-0147" width="560" height="320" style="border:0" loading="lazy" title="Omenwave — CVE-2017-0147 modelled chaining"></iframe>

Modelled plausible chaining potential derived from public CVE metadata (CVSS, CWE, CPE). Not a confirmed real-world exploit chain and contains no exploitation detail. For research and awareness only.

Methodology · Interactive explorer · JSON: /cve/CVE-2017-0147