The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanism, which allows remote attackers to gain privileges via NetBIOS name responses, aka "WPAD Elevation of Privilege Vulnerability."

The remote Windows host is missing a security update. It is, therefore, affected by multiple elevation of privilege vulnerabilities :

  - An elevation of privilege vulnerability exists in the     Web Proxy Auto Discovery (WPAD) protocol due to improper     handling of the proxy discovery process. A remote     attacker can exploit this, by responding to NetBIOS name     requests for WPAD, to bypass security restrictions and     gain elevated privileges. (CVE-2016-3213)

  - An elevation of privilege vulnerability exists in the     Web Proxy Auto Discovery (WPAD) protocol due to improper     handling of certain proxy discovery scenarios. A remote     attacker can exploit this to elevate privileges,     resulting in the ability to disclose or control network     traffic. (CVE-2016-3236)

  - An elevation of privilege vulnerability exists in     NetBIOS due to improper handling of responses. A remote     attacker can exploit this, via specially crafted NetBIOS     responses, to appear as a trusted network device,     resulting in the ability to render untrusted content in     a browser outside of Enhanced Protected Mode (EPM) or an     application container. (CVE-2016-3299)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3163649. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

ID	Name	Product	Family	Type	Severity
91605	MS16-077: Security Update for WPAD (3165191)	Nessus	Windows : Microsoft Bulletins	Local	critical
91596	MS16-063: Cumulative Security Update for Internet Explorer (3163649)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2016-3213

high

Tenable Plugins

critical

high