Windows Recovery Environment Agent Elevation of Privilege Vulnerability

The Windows 11 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41333, CVE-2021-43207, CVE-2021-43223,     CVE-2021-43226, CVE-2021-43229, CVE-2021-43230,     CVE-2021-43231, CVE-2021-43237, CVE-2021-43238,     CVE-2021-43239, CVE-2021-43240, CVE-2021-43247,     CVE-2021-43248, CVE-2021-43880, CVE-2021-43883,     CVE-2021-43893)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-43216, CVE-2021-43222,     CVE-2021-43224, CVE-2021-43227, CVE-2021-43235,     CVE-2021-43236)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-43219,     CVE-2021-43228)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-43217,     CVE-2021-43232, CVE-2021-43233, CVE-2021-43234)

The Windows Server 2022 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41333, CVE-2021-43207, CVE-2021-43223,     CVE-2021-43226, CVE-2021-43229, CVE-2021-43230,     CVE-2021-43231, CVE-2021-43237, CVE-2021-43238,     CVE-2021-43239, CVE-2021-43240, CVE-2021-43247,     CVE-2021-43248, CVE-2021-43880, CVE-2021-43883,     CVE-2021-43893)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-43216, CVE-2021-43222,     CVE-2021-43224, CVE-2021-43227, CVE-2021-43235,     CVE-2021-43236)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-43219,     CVE-2021-43228)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-43217,     CVE-2021-43232, CVE-2021-43233, CVE-2021-43234)

The remote Windows host is missing security update 5008212.
It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-41333, CVE-2021-43207, CVE-2021-43223,     CVE-2021-43226, CVE-2021-43229, CVE-2021-43230,     CVE-2021-43231, CVE-2021-43237, CVE-2021-43238,     CVE-2021-43239, CVE-2021-43240, CVE-2021-43247,     CVE-2021-43248, CVE-2021-43883, CVE-2021-43893)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-43215,     CVE-2021-43217, CVE-2021-43232, CVE-2021-43233,     CVE-2021-43234)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-43216, CVE-2021-43222,     CVE-2021-43224, CVE-2021-43227, CVE-2021-43235,     CVE-2021-43236, CVE-2021-43244)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-43219,     CVE-2021-43228, CVE-2021-43246)

ID	Name	Product	Family	Severity
156068	KB5008215: Windows 11 Security Update (December 2021)	Nessus	Windows : Microsoft Bulletins	critical
156066	KB5008223: Windows Server 2022 Security Update (December 2021)	Nessus	Windows : Microsoft Bulletins	critical
156065	KB5008212: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 / Windows 10 Version 21H2 Security Update (December 2021)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2021-43239

high

Tenable Plugins

critical

critical

critical