CVE-2016-2113

CVE-2016-2113, also known as "Badlock," is a critical vulnerability affecting Samba versions 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2. It stems from Samba's failure to properly verify X.509 certificates from TLS servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this to spoof LDAPS and HTTPS servers, potentially leading to the compromise of sensitive information. Rated with a CVSSv3 score of 7.4 (High), this vulnerability has a network attack vector and high impact on confidentiality and integrity, though it requires high attack complexity. The EPSS score of 0.06295 indicates a relatively low probability of exploitation in the wild, despite its high severity. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. While it garnered some media attention and community discussion at the time of disclosure, it is not listed in CISA's KEV catalog and is considered inactive on the Hot List.