Description

Solution

Plugin Output

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-21528,     CVE-2023-21568, CVE-2023-21704, CVE-2023-21705,     CVE-2023-21713, CVE-2023-21718)

Microsoft has released the following security updates to address this issue: 
  -KB5021126
  -KB5021129
  -KB5021522
  -KB5021127
  -KB5021045
  -KB5021037
  -KB5021128
  -KB5021124
  -KB5021125
  -KB5020863
  -KB5021112
  -KB5021123

KB : 5021037
  - C:\Program Files\Microsoft SQL Server\MSSQL12.BARTENDER\MSSQL\Binn\sqlservr.exe has not been patched.
    Remote version : 2014.120.6024.0
    Should be      : 2014.120.6174.8

  SQL Server Version   : 12.0.6024.0 Express Edition
  SQL Server Instance  : BARTENDER