CVE-2017-12151

CVE-2017-12151 describes a flaw in Samba client versions prior to 4.4.16, 4.5.14, and 4.6.8, specifically when using SMB3 with DFS redirects. This vulnerability allows a man-in-the-middle attacker to bypass encryption and signing requirements, enabling them to read or alter sensitive data. Rated 7.4 HIGH, it presents a significant risk due to its network-based attack vector and high impact on confidentiality and integrity, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not widely targeted.