The remote Windows host is missing security update 5016627. It is, therefore, affected by multiple vulnerabilities

  - Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability (CVE-2022-35747, CVE-2022-35769)

  - Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability (CVE-2022-30133, CVE-2022-35744)

  - Windows WebBrowser Control Remote Code Execution Vulnerability (CVE-2022-30194)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5016627: Windows Server 2022 Security Update (August 2022)

critical Nessus Plugin ID 163953

Version 1.11

Version 1.10

Version 1.9

Version 1.9

Version 1.8

Version 1.11 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.10 Oct 25, 2023, 7:17 PM CVSSv2 score source (changed from "CVE-2022-34715" to "CVE-2022-35744") Plugin Feed: 202310251917
Version 1.9 Feb 9, 2023, 8:01 PM CVE (Corrected CVE for August and October plugin sets.) Plugin Feed: 202302092001
Version 1.9 Oct 25, 2023, 5:17 PM CVSSv2 score source (changed from "CVE-2022-34715" to "CVE-2022-35744") Plugin Feed: 202310251717
Version 1.8 Dec 7, 2022, 8:11 PM CVSS metrics ("CVSSv2 score" changed from "5.0" to "10.0") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2022-35769" to "CVE-2022-34715") CVSSv2 severity (based on CVE-2022-34715, severity increased from "Medium" to "High") Plugin Feed: 202212072011