The remote Windows host is missing security update 5005106 or cumulative update 5005076. It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,     CVE-2021-34484, CVE-2021-34537, CVE-2021-36927)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36942)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26424,     CVE-2021-26432, CVE-2021-34533, CVE-2021-34535,     CVE-2021-36936, CVE-2021-36937, CVE-2021-36947)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-26433, CVE-2021-36926,     CVE-2021-36932, CVE-2021-36933)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-34480)

Detections

Analytics

KB5005106: Windows 8.1 and Windows Server 2012 R2 Security Update (August 2021)

critical Nessus Plugin ID 152433

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.11 Dec 29, 2023, 4:38 PM CVSS metrics ("CVSSv3 score" set to 9.9. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2021-26424") Plugin Feed: 202312291638
Version 1.10 Sep 22, 2023, 6:10 PM Detection Plugin Feed: 202309221810