Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.20.3.5)

critical Nessus Plugin ID 165276

Version 1.20

May 30, 2024, 1:46 PM

  • Exploit attributes ("Exploit framework canvas" set to "True")
  • Exploit attributes ("Exploit framework core" set to "True")
  • Exploit attributes ("Exploit framework metasploit" set to "True")
  • Exploit attributes ("Exploited by malware" set to "True")

Plugin Feed: 202405301346

Version 1.19

May 29, 2024, 9:59 PM

  • CEA reference

Plugin Feed: 202405292159

Version 1.18

May 29, 2024, 5:41 PM

  • CVE (set "CVE" coverage to "CVE-2019-17571,CVE-2020-25704,CVE-2020-36322,CVE-2020-9484,CVE-2020-9488,CVE-2021-4034,CVE-2021-42739,CVE-2021-26691,CVE-2021-34798,CVE-2021-39275,CVE-2021-44790,CVE-2021-45105,CVE-2021-45417,CVE-2022-21248,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366,CVE-2022-23181,CVE-2022-23302,CVE-2022-23305,CVE-2022-23307")
  • CVSS metrics ("CVSSv2 score" set to 9.0)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C")
  • CVSSv2 score source (changed from "CVE-2021-44790" to "CVE-2022-23307")
  • CVSSv3 score source (set to "CVE-2022-23305")
  • Exploit attributes ("Exploit framework canvas" changed from "True" to none)
  • Exploit attributes ("Exploit framework core" changed from "True" to none)
  • Exploit attributes ("Exploit framework metasploit" changed from "True" to none)
  • Exploit attributes ("Exploited by malware" changed from "True" to none)
  • Plugin metadata

Plugin Feed: 202405291741

Version 1.17

May 29, 2024, 10:26 AM

  • Exploit attributes ("Exploit framework canvas" set to "True")
  • Exploit attributes ("Exploit framework core" set to "True")
  • Exploit attributes ("Exploit framework metasploit" set to "True")
  • Exploit attributes ("Exploited by malware" set to "True")

Plugin Feed: 202405291026

Version 1.16

May 28, 2024, 9:38 PM

  • CEA reference

Plugin Feed: 202405282138

Version 1.15

May 28, 2024, 12:26 PM

  • CVE (set "CVE" coverage to "CVE-2020-9484,CVE-2021-4034,CVE-2021-26691,CVE-2021-34798,CVE-2021-39275,CVE-2021-44790,CVE-2021-45417,CVE-2022-21248,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366,CVE-2022-23181")
  • CVSS metrics ("CVSSv2 score" set to 7.5)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P")
  • CVSSv2 score source (changed from "CVE-2022-23307" to "CVE-2021-44790")
  • CVSSv3 score source (changed from "CVE-2022-23305" to none)
  • Exploit attributes ("Exploit framework canvas" changed from "True" to none)
  • Exploit attributes ("Exploit framework core" changed from "True" to none)
  • Exploit attributes ("Exploit framework metasploit" changed from "True" to none)
  • Exploit attributes ("Exploited by malware" changed from "True" to none)
  • Plugin metadata

Plugin Feed: 202405281226

Version 1.14

Mar 25, 2024, 5:51 PM

  • Plugin metadata

Plugin Feed: 202403251751

Version 1.13

Feb 23, 2024, 12:07 AM

  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202402230007

Version 1.12

Apr 7, 2023, 10:11 AM

  • Plugin metadata (spelling)

Plugin Feed: 202304071011

Version 1.11

Feb 23, 2023, 6:16 PM

  • Plugin metadata

Plugin Feed: 202302231816

Version 1.10

Feb 6, 2023, 9:36 PM

  • Exploit attributes ("Exploit framework metasploit" set to "True")

Plugin Feed: 202302062136

Version 1.9

Feb 3, 2023, 2:05 PM

  • Regenerated based on advisory update

Plugin Feed: 202302031405

Version 1.8

Jan 27, 2023, 4:02 PM

  • Exploit attributes ("Exploit framework metasploit" set to "True")

Plugin Feed: 202301271602

Version 1.7

Jan 27, 2023, 12:13 AM

  • Regenerated based on advisory update

Plugin Feed: 202301270013

Version 1.6

Jan 12, 2023, 6:19 PM

  • Exploit attributes ("Exploit framework core" set to "True")

Plugin Feed: 202301121819

Version 1.5

Dec 5, 2022, 10:02 PM

  • Reference

Plugin Feed: 202212052202

Version 1.4

Sep 29, 2022, 12:06 AM

  • CISA reference
  • CVE (Changed from CVE-2022-23302 to CVE-2022-23307)
  • CVSS metrics
  • CVSS temporal metrics
  • Exploit attributes

Plugin Feed: 202209290006

* Changelogs are generally available for changes made after Nov 1, 2022