The remote Windows host is missing security update 4601363 or cumulative update 4601347. It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC). An attacker who     successfully exploited the vulnerability could run a     specially crafted application on a device on the     network. (Enforcement mode) (CVE-2020-1472)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-24080,     CVE-2021-24086)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-1727, CVE-2021-24102, CVE-2021-24103,     CVE-2021-25195)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-1722,     CVE-2021-24074, CVE-2021-24077, CVE-2021-24078,     CVE-2021-24083, CVE-2021-24088, CVE-2021-24094)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-1734)

Detections

Analytics

KB4601363: Windows 7 and Windows Server 2008 R2 February 2021 Security Update

critical Nessus Plugin ID 146342

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.15 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.14 Jan 22, 2024, 3:14 PM CVSS metrics ("CVSSv3 score" set to 9.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2021-24094") Plugin Feed: 202401221514
Version 1.13 May 24, 2023, 12:08 AM CEA reference Plugin Feed: 202305240008
Version 1.12 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653