Is CVE-2010-0231 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2010-0231, but active exploitation has not been confirmed.

Can CVE-2010-0231 be exploited remotely?

Yes. CVE-2010-0231 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2010-0231?

CVE-2010-0231 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2010-0231

CRITICALPOC

CVE-2010-0231

CWE-264Published: February 10, 2010· Updated: Jun 16, 2026

10.0

CVSS v3.1

Official Description

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."

NVD Source

Technical Analysis

CVE-2010-0231 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2010-0231. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.