Netskope Threat Labs

OS-WINDOWS Microsoft Windows SMB srv2.sys remote code execution attempt

IPS-CFW

3 SIDs: 53427, 53428, 53447

First seen
September 2024
Last seen
September 2024

Detects an attempt to exploit CVE-2020-0796, a remote code execution flaw that can run code on the target in Microsoft Windows SMB srv2.sys.