The remote Windows host is missing security update 5020013. It is, therefore, affected by multiple vulnerabilities

  - Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability (CVE-2022-41090, CVE-2022-41116)

  - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions (CVE-2022-23824)

  - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability (CVE-2022-37966)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

KB5020013: Windows Server 2008 R2 Security Update (November 2022)

high Nessus Plugin ID 167103

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.9 Jan 3, 2023, 7:52 PM CISA reference CVSSv2 score source (changed from "CVE-2022-41047" to "CVE-2022-41128") CVSSv3 score source (set to "CVE-2022-41128")
Version 1.8 Jan 3, 2023, 11:49 AM CISA reference (removed deprecated CISA dates)
Version 1.7 Dec 15, 2022, 5:58 PM IAVM reference
Version 1.6 Dec 15, 2022, 4:16 PM IAVM reference
Version 1.5 Nov 10, 2022, 11:52 PM IAVM reference STIG Severity
Version 1.4 Nov 9, 2022, 9:51 PM CVSS temporal metrics Exploit attributes CISA reference
Version 1.3 Nov 9, 2022, 5:53 PM CVSS temporal metrics
Version 1.2 Nov 9, 2022, 3:32 AM New