The remote Windows host is missing security update 5058387. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute     code over a network. (CVE-2025-29967)

  - Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to disclose information over a network. (CVE-2025-29830, CVE-2025-29958, CVE-2025-29959)

  - Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to     disclose information over a network. (CVE-2025-29832, CVE-2025-29835, CVE-2025-29836, CVE-2025-29960,     CVE-2025-29961)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5058387: Windows 10 LTS 1507 Security Update (May 2025)

high Nessus Plugin ID 235844

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.8 Oct 29, 2025, 8:57 PM New Plugin Feed: 202510292057
Version 1.7 Sep 17, 2025, 9:12 PM New Plugin Feed: 202509172112
Version 1.6 Aug 31, 2025, 9:16 AM Plugin metadata (Added IAVM metadata and Missing CVEs) Plugin Feed: 202508310916
Version 1.5 Jun 14, 2025, 3:22 AM IAVM reference Plugin Feed: 202506140322
Version 1.4 May 16, 2025, 6:20 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202505161820
Version 1.2 May 14, 2025, 9:15 AM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202505140915
Version 1.1 May 14, 2025, 1:49 AM New Plugin Feed: 202505140149