Retour
-
Titre
Windows SMBv1 vulnerability -
Description
Due to Windows SMB vulnerability, SMBv1 must be disabled in the repository. -
Résolution
SMBv1 is the minimum protocol supported for file sharing. If the virtual appliances are not being used, you can remove SMB1 support in the repository and backups won't be affected as long as the repository supports SMB2/SMB3. The protocol being used will be negotiated by the Windows OS in order to connect to the repository and transfer the backup files.
If you are using the vRanger Virtual Appliances, please update to the latest version available. The Virtual Appliance 7.6.3 and onwards have the ability to communicate to the repository using SMB2/SMB3. This is negotiated by the Linux OS. If it is not possible to upgrade the Virtual Appliances or the vRanger application, we recommend using NFS as a workaround.
-
Informations supplémentaires
Per Microsoft Security Bulletin MS17-010, https://technet.microsoft.com/en-us/library/security/ms17-010.aspx, a Windows update can be applied to resolve the following vulnerabilities: CVE-2017-0143 CVE-2017-0144 CVE-2017-0145 CVE-2017-0146 CVE-2017-0147 CVE-2017-0148