Windows Backup Engine Elevation of Privilege Vulnerability

The remote Windows host is missing security update 4592503 or cumulative update 4592471. It is, therefore, affected by multiple vulnerabilities:

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17098, CVE-2020-17140)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964)

The remote Windows host is missing security update 4592446.
It is, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-17099)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17095,     CVE-2020-17096)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097,     CVE-2020-17103, CVE-2020-17134, CVE-2020-17136)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17094, CVE-2020-17098,     CVE-2020-17140)

The remote Windows host is missing security update 4592449.
It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097,     CVE-2020-17103, CVE-2020-17134, CVE-2020-17136)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17095,     CVE-2020-17096)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-17139)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17094, CVE-2020-17098,     CVE-2020-17140)

The remote Windows host is missing security update 4593226.
It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17095,     CVE-2020-17096)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-16996, CVE-2020-17099)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17098, CVE-2020-17138,     CVE-2020-17140)

The remote Windows host is missing security update 4592464.
It is, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-17099)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17098, CVE-2020-17140)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17096)

The remote Windows host is missing security update 4592440. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097,     CVE-2020-17103, CVE-2020-17134, CVE-2020-17136)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17095,     CVE-2020-17096)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17094, CVE-2020-17098,     CVE-2020-17140)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-16996, CVE-2020-17099, CVE-2020-17139)

The remote Windows host is missing security update 4592438.
It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17095,     CVE-2020-17096)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2020-17131)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17094, CVE-2020-17098,     CVE-2020-17140)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-17139)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097,     CVE-2020-17103, CVE-2020-17134, CVE-2020-17136,     CVE-2020-17137)

ID	Name	Product	Family	Severity
143572	KB4592503: Windows 7 and Windows Server 2008 R2 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
143571	KB4592446: Windows 10 Version 1803 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
143570	KB4592449: Windows 10 Version 1903 and Windows 10 Version 1909 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
143569	KB4593226: Windows 10 Version 1607 and Windows Server 2016 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
143565	KB4592464: Windows 10 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
143561	KB4592440: Windows 10 Version 1809 and Windows Server 2019 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
143558	KB4592438: Windows 10 Version 2004 December 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2020-16958

high

Tenable Plugins

high

high

high

high

high

high

high