Windows Remote Desktop Licensing Service Denial of Service Vulnerability

The remote Windows host is missing security update 5043125. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043092. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043051. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043055. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043050. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043138. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043087. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Graphics Component Elevation of Privilege Vulnerability (CVE-2024-38249, CVE-2024-38250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206909	KB5043125: Windows Server 2012 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206904	KB5043092: Windows Server 2008 R2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206902	KB5043051: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206899	KB5043055: Windows Server version 23H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206898	KB5043050: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206897	KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206896	KB5043138: Windows Server 2012 R2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206891	KB5043087: Windows Server 2008 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2024-38231

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical