The remote Windows host is missing security update 5005607 or cumulative update 5005623. It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-36955, CVE-2021-36963, CVE-2021-36964,     CVE-2021-36974, CVE-2021-38628, CVE-2021-38633,     CVE-2021-38638, CVE-2021-38639, CVE-2021-38667,     CVE-2021-38671, CVE-2021-40447)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-26435)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-36960, CVE-2021-36962,     CVE-2021-36969, CVE-2021-36972, CVE-2021-38629,     CVE-2021-38635, CVE-2021-38636)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-36965, CVE-2021-36958)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-36961)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36959)

Detections

Analytics

KB5005607: Windows Server 2012 September 2021 Security Update

high Nessus Plugin ID 153384

Version 1.9

Version 1.8

Version 1.7

Version 1.9 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.8 Dec 29, 2023, 4:38 PM CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202312291638
Version 1.7 Nov 30, 2023, 2:19 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202311301419