Windows Digital TV Tuner Elevation of Privilege Vulnerability

The remote Windows host is missing security update 5008285 or cumulative update 5008263. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,     CVE-2021-43223, CVE-2021-43226, CVE-2021-43229,     CVE-2021-43230, CVE-2021-43238, CVE-2021-43245,     CVE-2021-43248, CVE-2021-43883, CVE-2021-43893)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-43215,     CVE-2021-43217, CVE-2021-43232, CVE-2021-43233,     CVE-2021-43234)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-43216, CVE-2021-43222,     CVE-2021-43224, CVE-2021-43236)

The remote Windows host is missing security update 5008282 or cumulative update 5008244. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,     CVE-2021-43226, CVE-2021-43229, CVE-2021-43230,     CVE-2021-43238, CVE-2021-43245, CVE-2021-43883,     CVE-2021-43893)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-43215,     CVE-2021-43217, CVE-2021-43233, CVE-2021-43234)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-43216, CVE-2021-43222,     CVE-2021-43224, CVE-2021-43236)

The remote Windows host is missing security update 5008255 or cumulative update 5008277. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,     CVE-2021-43223, CVE-2021-43226, CVE-2021-43229,     CVE-2021-43230, CVE-2021-43238, CVE-2021-43245,     CVE-2021-43248, CVE-2021-43883, CVE-2021-43893)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-43215,     CVE-2021-43217, CVE-2021-43232, CVE-2021-43233,     CVE-2021-43234)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-43216, CVE-2021-43222,     CVE-2021-43224, CVE-2021-43236)

ID	Name	Product	Family	Severity
156073	KB5008285: Windows 8.1 and Windows Server 2012 R2 Security Update (December 2021)	Nessus	Windows : Microsoft Bulletins	critical
156069	KB5008282: Windows 7 and Windows Server 2008 R2 Security Update (December 2021)	Nessus	Windows : Microsoft Bulletins	critical
156064	KB5008255: Windows Server 2012 Security Update (December 2021)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2021-43245

high

Tenable Plugins

critical

critical

critical