WMI Antivirus Enumeration

info Nessus Plugin ID 45051

Synopsis

It is possible to obtain the list of antivirus software installed on the remote Windows host.

Description

By connecting to the remote Windows host with the supplied credentials, this plugin uses WMI to enumerate antivirus software installed on it.

Note that this plugin extracts this information from the 'root\securitycenter' and 'root\securitycenter2' WMI namespaces, which are only available in Windows desktop operating systems such as XP, Vista and Windows 7.

Plugin Details

Severity: Info

ID: 45051

File Name: wmi_enum_antivirus.nbin

Version: 1.231

Type: local

Agent: windows

Family: Windows

Published: 3/12/2010

Updated: 11/12/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/WMI/Available, WMI/Host/OS