Detections
Analytics
Microsoft IIS 7.0 Vulnerabilities (uncredentialed) (PCI/DSS)
high Nessus Plugin ID 108808
Language:
Synopsis
The remote web server may allow remote code execution.Description
According to the HTTP server banner the remote server is IIS 7.0. The server may be vulnerable to a number of vulnerabilities including a couple of remote code execution vulnerabilities.Solution
Ensure the appropriate patches have been applied.Plugin Details
Severity: High
ID: 108808
File Name: iis_7_pci.nasl
Version: 1.7
Type: remote
Family: Web Servers
Published: 4/3/2018
Updated: 8/5/2020
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:iis
Required KB Items: Settings/ParanoidReport, www/iis, Settings/PCI_DSS
Exploit Available: true
Exploit Ease: Exploits are available
Exploitable With
CANVAS (CANVAS)
Core Impact
Reference Information
CVE: CVE-2008-1446, CVE-2009-3555, CVE-2010-1256, CVE-2010-1899, CVE-2010-2566, CVE-2010-2730, CVE-2010-2731