Scholarlink

The EternalBlue exploit, developed by the National Security Agency (NSA), targets a vulnerability within the Microsoft Windows Server Message Block (SMB) protocol accessible through port 445. This vulnerability is identified as CVE-2017-0144 and addressed in the MS17-010 patch released by Microsoft. Exploited by hackers worldwide to launch some of the largest cyberattacks in history, this vulnerability resulted in billions of dollars in losses in 2017. Despite patches being available, thousands of devices globally remain exposed to this risk, posing significant potential for severe damage. This study delves into the specifics of the EternalBlue exploit, outlining its definitions and operational mechanisms. Furthermore, the article conducts an in-depth analysis to propose various strategies for mitigating this vulnerability.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

EternalBlue Exploit: Definitions and Working Mechanism

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Phuc-Hung Pham Le,
  • Long X. Dang,
  • Quy Ngoc Do,
  • Chi Nhan Hoang,
  • Luong Vuong Nguyen

摘要

The EternalBlue exploit, developed by the National Security Agency (NSA), targets a vulnerability within the Microsoft Windows Server Message Block (SMB) protocol accessible through port 445. This vulnerability is identified as CVE-2017-0144 and addressed in the MS17-010 patch released by Microsoft. Exploited by hackers worldwide to launch some of the largest cyberattacks in history, this vulnerability resulted in billions of dollars in losses in 2017. Despite patches being available, thousands of devices globally remain exposed to this risk, posing significant potential for severe damage. This study delves into the specifics of the EternalBlue exploit, outlining its definitions and operational mechanisms. Furthermore, the article conducts an in-depth analysis to propose various strategies for mitigating this vulnerability.