Remote Desktop Client Remote Code Execution Vulnerability

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027215. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027223. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027222. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027219. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027281. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-29372)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027231. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027256. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-29372)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027230. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-29372)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027282. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-29372)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5027225. It is, therefore, affected by multiple vulnerabilities

  - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363,     CVE-2023-32014, CVE-2023-32015)

  - Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
177317	Remote Desktop Client for Windows RCE (June 2023)	Nessus	Windows	high
177252	KB5027215: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177251	KB5027223: Windows 11 version 21H2 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177247	KB5027222: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177246	KB5027219: Windows 10 Version 1607 and Windows Server 2016 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177244	KB5027281: Windows Server 2012 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177242	KB5027231: Windows 11 version 22H2 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177241	KB5027256: Windows Server 2008 R2 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177238	KB5027230: Windows 10 LTS 1507 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177237	KB5027282: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical
177235	KB5027225: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (June 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-29362

high

Tenable Plugins

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical