Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

The remote Windows host is missing security update 5029244. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029253. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029250. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Fax Service Remote Code Execution Vulnerability (CVE-2023-35381)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
179497	KB5029244: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179495	KB5029253: Windows 11 version 21H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179492	KB5029250: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179491	KB5029263: Windows 11 version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-36914

medium

Tenable Plugins

critical

critical

critical

critical