The remote Windows host is missing security update 5011560 or cumulative update 5011560. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2022-23283, CVE-2022-23284, CVE-2022-23290,     CVE-2022-23293, CVE-2022-23296, CVE-2022-23298,     CVE-2022-23299, CVE-2022-24454, CVE-2022-24455,     CVE-2022-24459)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2022-21977, CVE-2022-22010,     CVE-2022-23281, CVE-2022-23297, CVE-2022-24503)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2022-24502)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2022-21973,     CVE-2022-21975, CVE-2022-23253)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-21990,     CVE-2022-23285, CVE-2022-23294)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5011560: Windows 8.1 and Windows Server 2012 R2 Security Update (March 2022)

high Nessus Plugin ID 158702

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.11 Sep 22, 2023, 6:10 PM Detection Plugin Feed: 202309221810
Version 1.10 Jan 26, 2023, 3:59 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploit framework core" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202301261559