Test ID:	1.3.6.1.4.1.25623.1.0.826831
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB5022338)
Summary:	This host is missing an important security; update according to Microsoft KB5022338
Description:	Summary: This host is missing an important security update according to Microsoft KB5022338 Vulnerability Insight: Multiple flaws exist due to: - A Remote Code Execution Vulnerability in Windows Layer 2 Tunneling Protocol. - An elevation of privilege vulnerability in Windows Kernel. - A Denial of Service Vulnerability in Windows Layer 2 Tunneling Protocol. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation will allow an attacker to elevate privileges, execute arbitrary commands, disclose information and conduct DoS attacks. Affected Software/OS: - Microsoft Windows 7 for 32-bit Systems Service Pack 1 - Microsoft Windows 7 for x64-based Systems Service Pack 1 - Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-21546 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21546 Common Vulnerability Exposure (CVE) ID: CVE-2023-21543 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21543 Common Vulnerability Exposure (CVE) ID: CVE-2023-21548 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21548 Common Vulnerability Exposure (CVE) ID: CVE-2023-21555 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21555 Common Vulnerability Exposure (CVE) ID: CVE-2023-21556 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21556 Common Vulnerability Exposure (CVE) ID: CVE-2023-21561 Microsoft Cryptographic Services Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21561 Common Vulnerability Exposure (CVE) ID: CVE-2023-21679 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21679 Common Vulnerability Exposure (CVE) ID: CVE-2023-21730 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21730 Common Vulnerability Exposure (CVE) ID: CVE-2023-21527 Windows iSCSI Service Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21527 Common Vulnerability Exposure (CVE) ID: CVE-2023-21532 Windows GDI Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21532 Common Vulnerability Exposure (CVE) ID: CVE-2023-21537 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21537 Common Vulnerability Exposure (CVE) ID: CVE-2023-21541 Windows Task Scheduler Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21541 Common Vulnerability Exposure (CVE) ID: CVE-2023-21542 Windows Installer Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21542 Common Vulnerability Exposure (CVE) ID: CVE-2023-21549 Windows SMB Witness Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21549 Common Vulnerability Exposure (CVE) ID: CVE-2023-21552 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21552 Common Vulnerability Exposure (CVE) ID: CVE-2023-21557 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21557 Common Vulnerability Exposure (CVE) ID: CVE-2023-21560 Windows Boot Manager Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21560 Common Vulnerability Exposure (CVE) ID: CVE-2023-21563 BitLocker Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21563 Common Vulnerability Exposure (CVE) ID: CVE-2023-21675 Windows Kernel Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21675 Common Vulnerability Exposure (CVE) ID: CVE-2023-21678 Windows Print Spooler Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21678 Common Vulnerability Exposure (CVE) ID: CVE-2023-21680 Windows Win32k Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21680 Common Vulnerability Exposure (CVE) ID: CVE-2023-21681 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21681 Common Vulnerability Exposure (CVE) ID: CVE-2023-21682 Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21682 Common Vulnerability Exposure (CVE) ID: CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21726 Common Vulnerability Exposure (CVE) ID: CVE-2023-21728 Windows Netlogon Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21728 Common Vulnerability Exposure (CVE) ID: CVE-2023-21732 Microsoft ODBC Driver Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21732 Common Vulnerability Exposure (CVE) ID: CVE-2023-21746 Windows NTLM Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21746 Common Vulnerability Exposure (CVE) ID: CVE-2023-21748 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21748 Common Vulnerability Exposure (CVE) ID: CVE-2023-21750 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21750 Common Vulnerability Exposure (CVE) ID: CVE-2023-21757 Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21757 Common Vulnerability Exposure (CVE) ID: CVE-2023-21774 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21774 Common Vulnerability Exposure (CVE) ID: CVE-2023-21525 Remote Procedure Call Runtime Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21525 Common Vulnerability Exposure (CVE) ID: CVE-2023-21765 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21765 Common Vulnerability Exposure (CVE) ID: CVE-2023-21752 Windows Backup Service Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 Common Vulnerability Exposure (CVE) ID: CVE-2023-21776 Windows Kernel Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21776 http://packetstormsecurity.com/files/172300/Windows-Kernel-CmpDoReDoCreateKey-CmpDoReOpenTransKey-Out-Of-Bounds-Read.html Common Vulnerability Exposure (CVE) ID: CVE-2023-21749 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21749 Common Vulnerability Exposure (CVE) ID: CVE-2023-21772 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21772 Common Vulnerability Exposure (CVE) ID: CVE-2023-21524 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21524 Common Vulnerability Exposure (CVE) ID: CVE-2023-21747 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21747 Common Vulnerability Exposure (CVE) ID: CVE-2023-21773 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21773 Common Vulnerability Exposure (CVE) ID: CVE-2023-21754 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21754 Common Vulnerability Exposure (CVE) ID: CVE-2023-21760 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21760
Copyright	Copyright (C) 2023 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.