Detections
Analytics

KB5048661: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2024)

critical Nessus Plugin ID 212239

Language:

Synopsis

The remote Windows host is affected by multiple vulnerabilities.

Description

The remote Windows host is missing security update 5048661. It is, therefore, affected by multiple vulnerabilities

 - Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2024-49074)

 - Input Method Editor (IME) Remote Code Execution Vulnerability (CVE-2024-49079)

 - Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2024-49090)

 - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2024-49112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Apply Security Update 5048661

See Also

https://support.microsoft.com/help/5048661

Plugin Details

Severity: Critical

ID: 212239

File Name: smb_nt_ms24_dec_5048661.nasl

Version: 1.4

Type: local

Agent: windows

Published: 12/10/2024

Updated: 12/13/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2024-49125

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

CVSS Score Source: CVE-2024-49112

Vulnerability Information

CPE: cpe:/o:microsoft:windows_server_2019, cpe:/o:microsoft:windows_10_1809

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/10/2024

Vulnerability Publication Date: 12/10/2024

CISA Known Exploited Vulnerability Due Dates: 12/31/2024

Reference Information

CVE: CVE-2024-49072, CVE-2024-49073, CVE-2024-49074, CVE-2024-49075, CVE-2024-49076, CVE-2024-49077, CVE-2024-49078, CVE-2024-49079, CVE-2024-49080, CVE-2024-49081, CVE-2024-49082, CVE-2024-49083, CVE-2024-49084, CVE-2024-49085, CVE-2024-49086, CVE-2024-49087, CVE-2024-49088, CVE-2024-49089, CVE-2024-49090, CVE-2024-49091, CVE-2024-49092, CVE-2024-49094, CVE-2024-49095, CVE-2024-49096, CVE-2024-49097, CVE-2024-49098, CVE-2024-49099, CVE-2024-49101, CVE-2024-49102, CVE-2024-49103, CVE-2024-49104, CVE-2024-49106, CVE-2024-49107, CVE-2024-49108, CVE-2024-49109, CVE-2024-49110, CVE-2024-49111, CVE-2024-49112, CVE-2024-49113, CVE-2024-49114, CVE-2024-49115, CVE-2024-49116, CVE-2024-49118, CVE-2024-49119, CVE-2024-49120, CVE-2024-49121, CVE-2024-49122, CVE-2024-49123, CVE-2024-49124, CVE-2024-49125, CVE-2024-49126, CVE-2024-49127, CVE-2024-49128, CVE-2024-49129, CVE-2024-49132, CVE-2024-49138

IAVA: 2024-A-0811, 2024-A-0812

MSFT: MS24-5048661

MSKB: 5048661