Detections
Analytics

KB5050006: Windows Server 2008 R2 Security Update (January 2025)

high Nessus Plugin ID 214112

Language:

Synopsis

The remote Windows host is affected by multiple vulnerabilities.

Description

The remote Windows host is missing security update 5050006. It is, therefore, affected by multiple vulnerabilities

 - Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVE-2025-21307)

 - Windows Telephony Service Remote Code Execution Vulnerability (CVE-2025-21223, CVE-2025-21233, CVE-2025-21236, CVE-2025-21237, CVE-2025-21238, CVE-2025-21240, CVE-2025-21243, CVE-2025-21244, CVE-2025-21245, CVE-2025-21246, CVE-2025-21250, CVE-2025-21252, CVE-2025-21266, CVE-2025-21273, CVE-2025-21282, CVE-2025-21286, CVE-2025-21302, CVE-2025-21303, CVE-2025-21305, CVE-2025-21306, CVE-2025-21339, CVE-2025-21409, CVE-2025-21411, CVE-2025-21413, CVE-2025-21417)

 - Windows BitLocker Information Disclosure Vulnerability (CVE-2025-21210, CVE-2025-21214)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Apply Security Update 5050006 or Cumulative Update 5050049

See Also

https://support.microsoft.com/help/5050006

https://support.microsoft.com/help/5050049

Plugin Details

Severity: High

ID: 214112

File Name: smb_nt_ms25_jan_5050006.nasl

Version: 1.6

Type: local

Agent: windows

Published: 1/14/2025

Updated: 2/14/2025

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2025-21417

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows_server_2008:r2

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/14/2025

Vulnerability Publication Date: 1/14/2025

Reference Information

CVE: CVE-2025-21189, CVE-2025-21210, CVE-2025-21214, CVE-2025-21215, CVE-2025-21217, CVE-2025-21220, CVE-2025-21223, CVE-2025-21226, CVE-2025-21227, CVE-2025-21228, CVE-2025-21230, CVE-2025-21231, CVE-2025-21232, CVE-2025-21233, CVE-2025-21236, CVE-2025-21237, CVE-2025-21238, CVE-2025-21240, CVE-2025-21242, CVE-2025-21243, CVE-2025-21244, CVE-2025-21245, CVE-2025-21246, CVE-2025-21249, CVE-2025-21250, CVE-2025-21251, CVE-2025-21252, CVE-2025-21255, CVE-2025-21256, CVE-2025-21258, CVE-2025-21260, CVE-2025-21261, CVE-2025-21263, CVE-2025-21265, CVE-2025-21266, CVE-2025-21268, CVE-2025-21269, CVE-2025-21270, CVE-2025-21272, CVE-2025-21273, CVE-2025-21276, CVE-2025-21277, CVE-2025-21282, CVE-2025-21285, CVE-2025-21286, CVE-2025-21287, CVE-2025-21288, CVE-2025-21289, CVE-2025-21290, CVE-2025-21294, CVE-2025-21295, CVE-2025-21296, CVE-2025-21297, CVE-2025-21298, CVE-2025-21300, CVE-2025-21302, CVE-2025-21303, CVE-2025-21305, CVE-2025-21306, CVE-2025-21307, CVE-2025-21310, CVE-2025-21319, CVE-2025-21320, CVE-2025-21324, CVE-2025-21327, CVE-2025-21328, CVE-2025-21329, CVE-2025-21331, CVE-2025-21332, CVE-2025-21336, CVE-2025-21338, CVE-2025-21339, CVE-2025-21341, CVE-2025-21389, CVE-2025-21409, CVE-2025-21411, CVE-2025-21413, CVE-2025-21417

IAVA: 2025-A-0033-S, 2025-A-0034-S

MSFT: MS25-5050006, MS25-5050049

MSKB: 5050006, 5050049