Microsoft Systems Management Server vulnerabilities

4 CVEs affecting Microsoft Systems Management Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-2536, published 2012-09-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0728, published 2004-07-27. Medium severity, CVSS 5.0. EPSS: 24.8% chance of exploitation in the next 30 days. The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that…
• CVE-2012-2536, published 2012-09-11. Medium severity, CVSS 4.3. EPSS: 16.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or…
• CVE-2000-0885, published 2000-12-19. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long…
• CVE-2000-0100, published 1999-12-29. High severity, CVSS 7.2. EPSS: 2.8% chance of exploitation in the next 30 days. The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.