The remote Windows host is missing security update 5014018. It is, therefore, affected by multiple vulnerabilities

  - Windows LDAP Remote Code Execution Vulnerability (CVE-2022-22012, CVE-2022-22013, CVE-2022-22014,     CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141)

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-26937)

  - Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2022-22019)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5014018: Windows Server 2012 Security Update (May 2022)

high Nessus Plugin ID 160946

Version 1.17

Version 1.16

Version 1.15

Version 1.17 Jan 7, 2025, 10:05 AM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2022-30138" to "CVE-2022-29105") Plugin Feed: 202501071005
Version 1.16 Nov 27, 2024, 12:25 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2022-30138") Plugin Feed: 202411271225
Version 1.15 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535