The remote Windows host is missing security update 5035933. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21441,     CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166)

  - Windows USB Hub Driver Remote Code Execution Vulnerability (CVE-2024-21429)

  - Windows Telephony Server Elevation of Privilege Vulnerability (CVE-2024-21439)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5035933: Windows Server 2008 Security Update (March 2024)

high Nessus Plugin ID 191939

Version 1.4