The remote Windows host is missing security update 4592440. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2020-16958, CVE-2020-16959, CVE-2020-16960,     CVE-2020-16961, CVE-2020-16962, CVE-2020-16963,     CVE-2020-16964, CVE-2020-17092, CVE-2020-17097,     CVE-2020-17103, CVE-2020-17134, CVE-2020-17136)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-17095,     CVE-2020-17096)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2020-17094, CVE-2020-17098,     CVE-2020-17140)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2020-16996, CVE-2020-17099, CVE-2020-17139)

Detections

Analytics

KB4592440: Windows 10 Version 1809 and Windows Server 2019 December 2020 Security Update

high Nessus Plugin ID 143561

Version 1.10

Version 1.9

Version 1.8

Version 1.10 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.9 Feb 6, 2024, 4:21 PM CVSS metrics ("CVSSv3 score" set to 8.5. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H") Plugin Feed: 202402061621
Version 1.8 Dec 6, 2022, 2:54 AM Reference Plugin Feed: 202212060254