The remote Windows host is missing security update 5014001. It is, therefore, affected by multiple vulnerabilities

  - Windows LDAP Remote Code Execution Vulnerability (CVE-2022-22012, CVE-2022-22013, CVE-2022-22014,     CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141)

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-26937)

  - Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2022-26923)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5014001: Windows 8.1 and Windows Server 2012 R2 Security Update (May 2022)

high Nessus Plugin ID 160931

Version 1.18

Version 1.17

Version 1.16

Version 1.18 Nov 27, 2024, 12:25 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2022-30138") Plugin Feed: 202411271225
Version 1.17 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.16 Sep 22, 2023, 6:10 PM Detection Plugin Feed: 202309221810