The version of Microsoft Malware Protection Engine (MMPE) installed on the remote Windows host is prior to 1.1.14700.5. It is, therefore, affected by a remote code execution vulnerability which could allow an attacker who successfully exploited this vulnerability to execute arbitrary code in the security context of the LocalSystem account and take control of the system. 攻撃者が、完全なユーザー権限で、プログラムのインストール、データの表示・変更・削除、または新規アカウントの作成を実行する可能性があります。

Note that Nessus has checked if a vulnerable version of MMPE is being used by any of the following applications :

  - Microsoft Forefront Endpoint Protection 2010

  - Microsoft Forefront Endpoint Protection

  - Microsoft Exchange Server 2013 and 2016

  - Microsoft Endpoint Protection

  - Microsoft Security Essentials

  - Windows Defender for Windows 7, Windows 8.1, Windows 10, Windows 10 1511, Windows 10 1607, Windows 10 1703, Windows 10 1709, and Windows Server 2016(SC)

  - Windows Intune Endpoint Protection

検出

1.1.14700.5より前のMicrosoft Malware Protection EngineのRCE

high Nessus プラグイン ID 108813

変更ログが見つかりません