Windows iSCSI Discovery Service Remote Code Execution Vulnerability

The remote Windows host is missing security update 5022893. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022838. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022858. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022834. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022840. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
171451	KB5022893: Windows Server 2008 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171448	KB5022838: Windows 10 Version 1607 and Windows Server 2016 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171447	KB5022858: Windows 10 LTS 1507 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171445	KB5022834: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171441	KB5022840: Windows 10 version 1809 / Windows Server 2019 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-21803

critical

Tenable Plugins

critical

critical

critical

critical

critical