Article: WannaCry Ransomware – Info, Patches & tips to disable SMBv1

[timbo343]

Yes. That's possible, although not recommended.

 

Thanks, its better than spending £1600 on new NAS boxes for now. I understand its not recommended but with a budget of only £8000, what else can i do.

[mjk]

Thanks, its better than spending £1600 on new NAS boxes for now. I understand its not recommended but with a budget of only £8000, what else can i do.

that's what the NHS said :-)

[southhamster]

It is worth contacting the manufacturers. The more people pushing for firmware updates to SMB2 on kit the more likely they are to produce patches.

Kyocera were really quick to respond and the local supplier updated firmware and fixed scanning yesterday.

[timbo343]

that's what the NHS said :-)

[emoji15] [emoji12] but the NHS weren't patched up.

[Geoff]

There's a Metasploit support for this exploit now. So you can test that way with Kali Linux or whatever. Here's a demo video:

 

https://youtu.be/GyH2vcC6P-8

[ZeroHour]

Microsoft have released a list of things they know about that dont support SMBv1: https://blogs.technet.microsoft.com/filecab/2017/06/01/smb1-product-clearinghouse/

[mjk]

Sorry for being a div but could somebody explain to me why the need to disable SMB1 please.

All I see is posts about how this screws up peoples networks, or do the patches provided by MS not fix the problem ?

Surely it's patch OR disable SMB1 ???

 

So it looks like MS knew they hadn't fixed it.

https://www.onmsft.com/news/microsoft-wont-patch-20-yr-old-smbv1-vulnerability-you-should-just-turn-the-service-off