SMB list shares

Description
  • It's possible to establish a NULL session to this host. A null session is a session established with a server when no credentials are supplied. Use of null sessions, however, can expose information to an anonymous user that could compromise security on a system. Using this NULL session it's possible to enumerate the network shares.
Remediation
  • It's recommended to disallow null sessions to the fullest extent possible.
References