CVE-2017-7494

CVE-2017-7494, also known as SambaCry, is a critical remote code execution vulnerability affecting Samba versions 3.5.0 through 4.6.4, 4.5.10, and 4.4.14. This flaw allows an unauthenticated attacker to upload a malicious shared library to a writable share and then compel the Samba server to load and execute it. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, including in known ransomware campaigns, and has readily available exploit modules in frameworks like Metasploit. The high EPSS score, extensive community discussion, and numerous media reports underscore its significant risk and widespread attention.