0% found this document useful (0 votes)

186 views10 pages

WS2016DC - Vulnerabilities and Compliance 6l67ji

This document provides a summary of vulnerabilities found on two assets. Asset 1 had 85 findings total, including one critical and one high severity vulnerability. Asset 2 had 110 total findings, including two critical and three high severity vulnerabilities. The summaries include the vulnerability name, plugin ID, and severity for each finding.

Uploaded by

Antonio Salvador Hernandez Barraza

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

186 views10 pages

WS2016DC - Vulnerabilities and Compliance 6l67ji

Uploaded by

Antonio Salvador Hernandez Barraza

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 10

Tenable.

io Report
Tenable.io Report
Wed, 22 Dec 2021 19:20:18 UTC
Table Of Contents
Assets Summary (Executive)............................................................................................... 3
•ad................................................................................................................................................................................. 4
•ad................................................................................................................................................................................. 7
Assets Summary (Executive)
ad
Summary
Critical High Medium Low Info Total

1 1 2 0 81 85
Details
Severity Plugin Id Name

Critical 156063 KB5008207: Windows 10 Version 1607 and Windows Server 2016 Security
Update (December 2021)

High 151285 VMware Tools 11.x < 11.2.6 Privilege Escalation (VMSA-2021-0013)

Medium 151012 VMware Tools 11.x < 11.3.0 DoS (VMSA-2021-0011)

Medium 139239 Windows Security Feature Bypass in Secure Boot (BootHole)

Info 139785 DISM Package List (Windows)

Info 72367 Microsoft Internet Explorer Version Detection

Info 105793 VMware Tools Detection

Info 125835 Microsoft Remote Desktop Connection Installed

Info 45590 Common Platform Enumeration (CPE)

Info 51351 Microsoft .NET Framework Detection

Info 70329 Microsoft Windows Process Information

Info 24269 WMI Available

Info 44871 WMI Windows Feature Enumeration

Info 92366 Microsoft Windows Last Boot Time

Info 58452 Microsoft Windows Startup Software Enumeration

Info 11457 Microsoft Windows SMB Registry : Winlogon Cached Password Weakness

Info 24272 Network Interfaces Enumeration (WMI)

Info 57033 Microsoft Patch Bulletin Feasibility Check

Info 64582 Netstat Connection Information

Info 60119 Microsoft Windows SMB Share Permissions Enumeration

Info 55472 Device Hostname

Info 63620 Windows Product Key Retrieval

Info 50859 Microsoft Windows SMB : WSUS Client Configured

Info 34252 Microsoft Windows Remote Listeners Enumeration (WMI)

Info 66424 Microsoft Malicious Software Removal Tool Installed

Info 93962 Microsoft Security Rollup Enumeration

4
Info 72482 Windows Display Driver Enumeration

Info 85736 Windows Store Application Enumeration

Info 10456 Microsoft Windows SMB Service Enumeration

Info 92368 Microsoft Windows Scripting Host Settings

Info 35716 Ethernet Card Manufacturer Detection

Info 10859 Microsoft Windows SMB LsaQueryInformationPolicy Function SID

Enumeration

Info 10396 Microsoft Windows SMB Shares Access

Info 10902 Microsoft Windows 'Administrators' Group User List

Info 92364 Microsoft Windows Environment Variables

Info 148541 Windows Language Settings Detection

Info 66334 Patch Report

Info 38689 Microsoft Windows SMB Last Logged On User Disclosure

Info 10398 Microsoft Windows SMB LsaQueryInformationPolicy Function NULL

Session Domain SID Enumeration

Info 92367 Microsoft Windows PowerShell Execution Policy

Info 103871 Microsoft Windows Network Adapters

Info 10400 Microsoft Windows SMB Registry Remotely Accessible

Info 155963 Windows Printer Driver Enumeration

Info 50346 Microsoft Update Installed

Info 100574 Tenable Windows Nessus Agent Installed

Info 131023 Windows Defender Installed

Info 92369 Microsoft Windows Time Zone Information

Info 23974 Microsoft Windows SMB Share Hosting Office Files

Info 52001 WMI QuickFixEngineering (QFE) Enumeration

Info 58181 Windows DNS Server Enumeration

Info 62042 SMB QuickFixEngineering (QFE) Enumeration

Info 92429 Recycle Bin Files

Info 99364 Microsoft .NET Security Rollup Enumeration

Info 44401 Microsoft Windows SMB Service Config Enumeration

Info 117887 OS Security Patch Assessment Available

Info 10908 Microsoft Windows 'Domain Administrators' Group User List

Info 92424 MUICache Program Execution History

5
Info 72879 Microsoft Internet Explorer Enhanced Security Configuration Detection

Info 70331 Microsoft Windows Process Module Information

Info 34096 BIOS Info (WMI)

Info 20811 Microsoft Windows Installed Software Enumeration (credentialed check)

Info 11936 OS Identification

Info 57364 PuTTY Detection

Info 92365 Microsoft Windows Hosts File

Info 63080 Microsoft Windows Mounted Devices

Info 97086 Server Message Block (SMB) Protocol Version 1 Enabled

Info 24270 Computer Manufacturer Information (WMI)

Info 38153 Microsoft Windows Summary of Missing Patches

Info 10413 Microsoft Windows SMB Registry : Remote PDC/BDC Detection

Info 140578 CBS Removed Package Enumeration (Windows Event Log Tool)

Info 34220 Netstat Portscanner (WMI)

Info 92435 UserAssist Execution History

Info 17651 Microsoft Windows SMB : Obtains the Password Policy

Info 16193 Antivirus Software Check

Info 92371 Microsoft Windows DNS Cache

Info 19506 Nessus Scan Information

Info 48763 Microsoft Windows 'CWDIllegalInDllSearch' Registry Setting

Info 48942 Microsoft Windows SMB Registry : OS Version and Processor Architecture

Info 92434 User Download Folder Files

Info 10395 Microsoft Windows SMB Shares Enumeration

Info 20094 VMware Virtual Machine Detection

Info 151440 Microsoft Windows Print Spooler Service Enabled

Info 92415 Application Compatibility Cache

Info 92370 Microsoft Windows ARP Table

Info 48337 Windows ComputerSystemProduct Enumeration (WMI)

6
ad
Summary
Critical High Medium Low Info Total

2 3 12 0 93 110
Details
Severity Plugin Id Name

Critical 101366 KB4025339: Windows 10 Version 1607 and Windows Server 2016 July
2017 Cumulative Update

Critical 156063 KB5008207: Windows 10 Version 1607 and Windows Server 2016 Security
Update (December 2021)

High 151285 VMware Tools 11.x < 11.2.6 Privilege Escalation (VMSA-2021-0013)

High 142421 Wireshark 3.2.x < 3.2.8 Multiple Vulnerabilities

High 35453 Microsoft Windows Update Reboot Required

Medium 144634 Wireshark 3.2.x < 3.2.9 Multiple Vulnerabilities

Medium 147645 Wireshark 3.2.x < 3.2.12 A Vulnerability

Medium 148946 Wireshark 3.2.x < 3.2.13 A Vulnerability

Medium 155571 Wireshark 3.2.x < 3.2.18 Multiple Vulnerabilities

Medium 63155 Microsoft Windows Unquoted Service Path Enumeration

Medium 151643 Wireshark 3.2.x < 3.2.15 A Vulnerability

Medium 139573 Wireshark 3.2.x < 3.2.6 A Vulnerability

Medium 142678 Wireshark 3.2.x < 3.2.8 Multiple Vulnerabilities

Medium 132101 Windows Speculative Execution Configuration Check

Medium 140757 Wireshark 3.2.x < 3.2.7 Multiple Vulnerabilities

Medium 136946 Windows 10 / Windows Server 2016 September 2017 Information

Disclosure Vulnerability (CVE-2017-8529)