CVE-2010-2551

CVE-2010-2551 describes a denial-of-service vulnerability in the SMB Server of Microsoft Windows Vista, Windows Server 2008, and Windows 7. An attacker can exploit this by sending a crafted SMBv1 or SMBv2 packet, leading to a system hang due to improper validation of an internal SMB variable. This vulnerability has a CVSS score of 7.8, indicating high severity with a network-based attack vector and low attack complexity, resulting in a complete loss of availability. Despite its age and high EPSS/FAUCET risk scores, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.