The remote Windows host is missing security update 5058411 or Hot Patch 5058497. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute     code over a network. (CVE-2025-29967)

  - Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to disclose information over a network. (CVE-2025-29830, CVE-2025-29958, CVE-2025-29959)

  - Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to     disclose information over a network. (CVE-2025-29832, CVE-2025-29835, CVE-2025-29836, CVE-2025-29960,     CVE-2025-29961)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5058411: Windows 11 Version 24H2 / Windows Server 2025 Security Update (May 2025)

high Nessus Plugin ID 235839

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.5 May 30, 2025, 10:30 PM New Plugin Feed: 202505302230
Version 1.4 May 16, 2025, 6:20 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202505161820
Version 1.2 May 14, 2025, 9:15 AM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202505140915
Version 1.1 May 14, 2025, 1:49 AM New Plugin Feed: 202505140149