The remote Windows host is missing security update 5005043.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26424,     CVE-2021-26432, CVE-2021-34530, CVE-2021-34533,     CVE-2021-34534, CVE-2021-34535, CVE-2021-36936,     CVE-2021-36937, CVE-2021-36947)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36942)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,     CVE-2021-34484, CVE-2021-34487, CVE-2021-34536,     CVE-2021-34537)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-34480)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-26433, CVE-2021-36926,     CVE-2021-36932, CVE-2021-36933, CVE-2021-36938)

Detections

Analytics

KB5005043: Windows 10 Version 1607 and Windows Server 2016 Security Update (August 2021)

critical Nessus Plugin ID 152434

Version 1.10