Ctrl + K
/ news / CVE
CVE•Published 2025-06-10•5 articles on news•5 live references•NVD data

CVE-2025-33073

Vulnerability data via CVEDB (Shodan)

CISA KEVKnown exploited in the wild.
CISA action: Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.
CVSS v3.1
8.8
HIGH
EPSS percentile
100
Exploit Prediction Scoring System · top 0% of all CVEs
Description

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

Timeline
Published 2025-06-10

External references

NVDMITREExploit-DBtrickest/cveVulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts
vuln:CVE-2025-33073
Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · OS
os:"Windows 10 1507"
Hosts Shodan identified as running Windows 10 1507.
More intel sources (5)
Shodan report
vuln:CVE-2025-33073
Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2025-33073
Censys host search filtered to this CVE id.
grep.app
CVE-2025-33073
Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2025-33073
GitHub code search for direct mentions.
Google dork
"CVE-2025-33073" exploit -site:nvd.nist.gov
Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2025-330738 repos
GhostTroops/TOPShell
TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
★ 732·updated 6d ago
mverschu/CVE-2025-33073Python
PoC Exploit for the NTLM reflection SMB flaw.
★ 720·updated 7mo ago
Ostorlab/KEVunknown
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
★ 619·updated 6d ago
depthsecurity/RelayKing-DepthPython
Dominate the domain. Relay to royalty.
★ 355·updated 6mo ago
JFR-C/Windows-Penetration-TestingC
Technical notes, AD pentest methodology, list of tools, scripts and Windows commands that are useful for internal penetration tests and assumed breach exercises (red teaming).
★ 329·updated 2mo ago
jonaslejon/ad-autopwnPython
AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD/Ghost-SPN/TGS-rewrite/Dollar-Ticket/WPAD/W…
★ 208·updated 1w ago
OleFredrik1/remoteKrbRelayxPython
A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
★ 151·updated 1y ago
lupingQAQ/impacket-programming-manualPython
impacket programming manual and tutorial — write your own AD PoC with Kerberos/RPC/DCOM/WMI source-level guides (中英双语+PDF)
★ 108·updated 6d ago
Articles on news mentioning CVE-2025-33073