Windows Installer Elevation of Privilege Vulnerability

The remote Windows host is missing security update 5022893. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022874. It is, therefore, affected by multiple vulnerabilities

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

  - Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-21689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
171451	KB5022893: Windows Server 2008 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	Local	critical
171440	KB5022874: Windows Server 2008 R2 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	Local	critical

Detections

Analytics

CVE-2023-21800

high

Tenable Plugins

critical

critical