The remote Windows host is missing security update 5013944. It is, therefore, affected by multiple vulnerabilities

  - Windows LDAP Remote Code Execution Vulnerability (CVE-2022-22012, CVE-2022-22013, CVE-2022-22014,     CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29139,     CVE-2022-29141)

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-26937)

  - Windows Graphics Component Remote Code Execution Vulnerability (CVE-2022-26927)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5013944: Windows Server 2022 Security Update (May 2022)

high Nessus Plugin ID 160929

Version 1.18

Version 1.17

Version 1.16

Version 1.18 Nov 27, 2024, 12:25 PM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2022-26927") Plugin Feed: 202411271225
Version 1.17 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.16 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046