EUVD-2025-17740CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3Tags
Description
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
Analysis
Windows Standards-Based Storage Management Service contains an uncontrolled resource consumption vulnerability allowing unauthenticated network attackers to cause denial of service. The service manages storage operations and its disruption affects storage provisioning and management on Windows servers.
Technical Context
The Standards-Based Storage Management Service (smphost) manages SMI-S based storage operations on Windows servers. An uncontrolled resource consumption flaw allows remote attackers to exhaust service resources without authentication, causing storage management operations to fail.
Affected Products
['Windows Server (multiple versions)']
Remediation
Apply the Microsoft security update. Restrict network access to the storage management service port. Monitor service health for resource consumption anomalies.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today