The release of a PoC for the Windows flaw known as SMBGhost could set off cyberattack waves, CISA warned. Microsoft patched the bug tracked as CVE-2020-0796 back in March; also known as SMBGhost or CoronaBlue, it affects Windows 10 and Windows Server 2019. The bug is an integer overflow vulnerability in the SMBv3.1 message decompression routine of the kernel driver srv2.sys.sys. It exists in version 3.1.1 of the Microsoft Server Message Block (SMB) protocol the same protocol that was targeted by WannaCry ransomware in 2017.
Source: https://threatpost.com/smbghost-rce-exploit-corporate-networks/156391/

