Microsoft Management Console Remote Code Execution Vulnerability

The remote Windows host is missing security update 5043080. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Microsoft Management Console Remote Code Execution Vulnerability (CVE-2024-38259)

  - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043055. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Windows Remote Desktop Licensing Service Spoofing Vulnerability (CVE-2024-43455)

  - Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38260,     CVE-2024-38263, CVE-2024-43454, CVE-2024-43467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043067. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Microsoft Management Console Remote Code Execution Vulnerability (CVE-2024-38259)

  - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5043076. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

  - Microsoft Management Console Remote Code Execution Vulnerability (CVE-2024-38259)

  - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206907	KB5043080: Windows 11 version 24H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206899	KB5043055: Windows Server version 23H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206897	KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206893	KB5043067: Windows 11 version 21H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical
206890	KB5043076: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (September 2024)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2024-38259

high

Tenable Plugins

critical

critical

critical

critical

critical