CVE-2021-45100
The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol specification. When Windows 10 detects this protocol violation, it disables encryption.
Published:Dec 14, 2021
Last Modified:Nov 21, 2024
EPS:Dec 16, 2021
EPSS Score:0.00123
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Ksmbd Project
Product
Ksmbd
Ksmbd Project
Ksmbd
Vendor
Linux
Product
Linux Kernel
Linux
Linux Kernel
Vendor
Netapp
Product
H300e
Netapp
H300e
Vendor
Netapp
Product
H300e Firmware
Netapp
H300e Firmware
Vendor
Netapp
Product
H300s
Netapp
H300s
Vendor
Netapp
Product
H300s Firmware
Netapp
H300s Firmware
Vendor
Netapp
Product
H410c
Netapp
H410c
Vendor
Netapp
Product
H410c Firmware
Netapp
H410c Firmware
Vendor
Netapp
Product
H410s
Netapp
H410s
Vendor
Netapp
Product
H410s Firmware
Netapp
H410s Firmware
Vendor
Netapp
Product
H500e
Netapp
H500e
Vendor
Netapp
Product
H500e Firmware
Netapp
H500e Firmware
Vendor
Netapp
Product
H500s
Netapp
H500s
Vendor
Netapp
Product
H500s Firmware
Netapp
H500s Firmware
Vendor
Netapp
Product
H700e
Netapp
H700e
Vendor
Netapp
Product
H700e Firmware
Netapp
H700e Firmware
Vendor
Netapp
Product
H700s
Netapp
H700s
Vendor
Netapp
Product
H700s Firmware
Netapp
H700s Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
