The remote Windows host is missing security update 5015877 or cumulative update 5015874. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-22024,     CVE-2022-22027, CVE-2022-22029, CVE-2022-22038,     CVE-2022-22039, CVE-2022-30211, CVE-2022-30221)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2022-22023, CVE-2022-22048, CVE-2022-30203)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2022-22022, CVE-2022-22026, CVE-2022-22034,     CVE-2022-22036, CVE-2022-22037, CVE-2022-22041,     CVE-2022-22047, CVE-2022-22049, CVE-2022-22050,     CVE-2022-30202, CVE-2022-30205, CVE-2022-30206,     CVE-2022-30209, CVE-2022-30220, CVE-2022-30224,     CVE-2022-30225, CVE-2022-30226)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5015877: Windows 8.1 and Windows Server 2012 R2 Security Update (July 2022)

high Nessus Plugin ID 163042

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.13 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.12 Sep 22, 2023, 6:10 PM Detection Plugin Feed: 202309221810
Version 1.11 Jan 16, 2023, 4:07 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301161607
Version 1.10 Dec 6, 2022, 4:40 AM Reference Plugin Feed: 202212060440
Version 1.9 Sep 29, 2022, 12:06 AM CVSS metrics Plugin Feed: 202209290006