4

The currently spreading ransomware WannaCry exploits SMB vulnerabilities to infect new computer.

Is this exploitation possible over the internet?

How to check if my computer has SMB accessible over the internet or not?

Improve this question

1 Answer 1

Reset to default
5

If your port 445/tcp is exposed to the outside then your SMB is accessible over internet. This usually requires port forwarding and your public/private IP must be reachable from the outside.

(Wannacry) as you might now is using "an exploit" and is not accessing SMB the regular way..

And for the sake of sharing, I guess you asked this question following what happened last Friday, Cisco released a snort rule for ETERNALBLUE (the SMB exploit) as SID 41978

Improve this answer
2
  • Thanks, so I guess that a "normal Windows computer with dynamic private IP behind a router" will not be infected from the internet by this exploit.
    – THN
    Commented May 16, 2017 at 8:58
  • I this that you will be fine if you are using private IPs
    – Soufiane Tahiri
    Commented May 16, 2017 at 11:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .