Skip to main content

Media Alert: Tenable Releases Plugins for EternalDarkness

COLUMBIA, Md., March 13, 2020 (GLOBE NEWSWIRE) — Tenable®, Inc., the Cyber Exposure company, has released plugins for EternalDarkness (CVE-2020-0796), a “wormable” remote code execution (RCE) vulnerability in Microsoft Server Message Block 3.1.1 (SMBv3). The flaw would grant attackers arbitrary code execution in both SMB Server and SMB Client.
Details about the flaw were mistakenly disclosed earlier this week in a security vendor’s Microsoft Patch Tuesday blog post. Microsoft subsequently acknowledged the vulnerability publicly and published an advisory for it.“This vulnerability is unique in a few ways, most notably the accidental disclosure and out-of-band patch. Microsoft rarely releases patches outside of its normal patch cycle, so this update should be taken very seriously,” said Renaud Deraison, co-founder and CTO, Tenable. “We implore organizations to patch their systems immediately as we’ve already seen proof-of-concept scripts to identify vulnerable instances, as well as attempts to exploit the flaw.”Microsoft has released software updates to address CVE-2020-0796. Tenable urges customers to apply updates immediately. A list of Tenable plugins to identify the vulnerability is available here.For more information about the vulnerability, read the Tenable Research blog post.About Tenable
Tenable®, Inc. is the Cyber Exposure company. Over 30,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include more than 50 percent of the Fortune 500, more than 30 percent of the Global 2000 and large government agencies. Learn more at www.tenable.com.
Contact Information:
Cayla Baker
Tenable
tenablepr@tenable.com
443-545-2102, x 1544

Disclaimer & Cookie Notice

Welcome to GOLDEA services for Professionals

Before you continue, please confirm the following:

Professional advisers only

I am a professional adviser and would like to visit the GOLDEA CAPITAL for Professionals website.

Important Notice for Investors:

The services and products offered by Goldalea Capital Ltd. are intended exclusively for professional market participants as defined by applicable laws and regulations. This typically includes institutional investors, qualified investors, and high-net-worth individuals who have sufficient knowledge, experience, resources, and independence to assess the risks of trading on their own.

No Investment Advice:

The information, analyses, and market data provided are for general information purposes only and do not constitute individual investment advice. They should not be construed as a basis for investment decisions and do not take into account the specific investment objectives, financial situation, or individual needs of any recipient.

High Risks:

Trading in financial instruments is associated with significant risks and may result in the complete loss of the invested capital. Goldalea Capital Ltd. accepts no liability for losses incurred as a result of the use of the information provided or the execution of transactions.

Sole Responsibility:

The decision to invest or not to invest is solely the responsibility of the investor. Investors should obtain comprehensive information about the risks involved before making any investment decision and, if necessary, seek independent advice.

No Guarantees:

Goldalea Capital Ltd. makes no warranties or representations as to the accuracy, completeness, or timeliness of the information provided. Markets are subject to constant change, and past performance is not a reliable indicator of future results.

Regional Restrictions:

The services offered by Goldalea Capital Ltd. may not be available to all persons or in all countries. It is the responsibility of the investor to ensure that they are authorized to use the services offered.

Please note: This disclaimer is for general information purposes only and does not replace individual legal or tax advice.