The remote Windows host is missing security update 4601354.
It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-1698, CVE-2021-1727, CVE-2021-1732,     CVE-2021-24102, CVE-2021-24103, CVE-2021-25195)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-24080,     CVE-2021-24086, CVE-2021-24098)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-1722,     CVE-2021-24074, CVE-2021-24077, CVE-2021-24083,     CVE-2021-24088, CVE-2021-24093, CVE-2021-24094)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-1734, CVE-2021-24076,     CVE-2021-24079, CVE-2021-24106)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application. (CVE-2021-1731,     CVE-2021-24082)

Detections

Analytics

KB4601354: Windows 10 Version 1803 February 2021 Security Update

critical Nessus Plugin ID 146339

Version 1.14

Version 1.13

Version 1.12

Version 1.14 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.13 Jan 20, 2023, 1:53 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301201353
Version 1.12 Dec 5, 2022, 10:02 PM CVE (set "CVE" coverage to "CVE-2021-24111") IAVM reference Plugin Feed: 202212052202