The remote Windows host is missing security update 5018425. It is, therefore, affected by multiple vulnerabilities

– Server Service Remote Protocol Elevation of Privilege Vulnerability (CVE-2022-38045)

– Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2022-38040)

– Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2022-37982, CVE-2022-38031)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More