The remote host has the HKEY_CLASSES_ROOT\ms-msdt registry key. This is a known exposure for CVE-2022-30190.

Note that Nessus has not tested for CVE-2022-30190. It is only checking if the registry key exists. The recommendation is to apply the latest patch.

The remote Windows host is missing security update 5014699. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-30166, CVE-2022-30165, CVE-2022-30160 CVE-2022-30154, CVE-2022-30151, CVE-2022-30150,      CVE-2022-30147, CVE-2022-30132, CVE-2022-30131)

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature     and perform unauthorized actions compromising the integrity of the system/application. (CVE-2022-30164)     
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-30163, CVE-2022-30161, CVE-2022-30153, CVE-2022-30149,     CVE-2022-30146, CVE-2022-30145, CVE-2022-30143, CVE-2022-30142, CVE-2022-30141, CVE-2022-30140,     CVE-2022-30139,CVE-2022-30190)

The remote Windows host is missing security update 5014743. It is, therefore, affected by multiple vulnerabilities

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVE-2022-30166)

  - Windows Advanced Local Procedure Call Elevation of Privilege Vulnerability (CVE-2022-30160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014710. It is, therefore, affected by multiple vulnerabilities

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

  - Kerberos AppContainer Security Feature Bypass Vulnerability (CVE-2022-30164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014746. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014742. It is, therefore, affected by multiple vulnerabilities

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

  - Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVE-2022-30166)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014702. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014697. It is, therefore, affected by multiple vulnerabilities

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014741. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014678. It is, therefore, affected by multiple vulnerabilities

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014692. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
161691	The Microsoft Windows Support Diagnostic Tool (MSDT) RCE Workaround Detection (CVE-2022-30190)	Nessus	Windows	5/31/2022	7/28/2022	info
162201	KB5014699: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/16/2023	high
162193	KB5014743: Windows Server 2008 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/16/2023	high
162206	KB5014710: Windows 10 LTS 1507 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/16/2023	high
162202	KB5014746: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	9/22/2023	critical
162191	KB5014742: Windows 7 and Windows Server 2008 R2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/16/2023	high
162196	KB5014702: Windows 10 Version 1607 and Windows Server 2016 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/13/2023	critical
162188	KB5014697: Windows 11 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/16/2023	high
162194	KB5014741: Windows Server 2012 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/13/2023	critical
162205	KB5014678: Windows Server 2022 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/16/2023	high
162197	KB5014692: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	6/14/2022	1/13/2023	critical

Detections

Analytics

Plugins Search

info

high

high

high

critical

high

critical

high

critical

high

critical