Windows Desired State Configuration (DSC) Information Disclosure Vulnerability

The remote Windows host is missing security update 5014699. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-30166, CVE-2022-30165, CVE-2022-30160 CVE-2022-30154, CVE-2022-30151, CVE-2022-30150,      CVE-2022-30147, CVE-2022-30132, CVE-2022-30131)

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature     and perform unauthorized actions compromising the integrity of the system/application. (CVE-2022-30164)     
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-30163, CVE-2022-30161, CVE-2022-30153, CVE-2022-30149,     CVE-2022-30146, CVE-2022-30145, CVE-2022-30143, CVE-2022-30142, CVE-2022-30141, CVE-2022-30140,     CVE-2022-30139,CVE-2022-30190)

The remote Windows host is missing security update 5014692. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014702. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014697. It is, therefore, affected by multiple vulnerabilities

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
162201	KB5014699: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high
162197	KB5014692: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	critical
162196	KB5014702: Windows 10 Version 1607 and Windows Server 2016 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	critical
162188	KB5014697: Windows 11 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2022-30148

medium

Tenable Plugins

high

critical

critical

high