The remote Windows host is missing security update 5031362. It is, therefore, affected by multiple vulnerabilities

  - The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-44487)   
  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36577)

  - Windows IIS Server Elevation of Privilege Vulnerability (CVE-2023-36434)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5031362: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2023)

critical Nessus Plugin ID 182862

Version 1.8