Microsoft Internet Explorer Unsupported Version Detection

critical Nessus Plugin ID 22024

Synopsis

The remote host contains an unsupported version of Internet Explorer.

Description

According to its self-reported version number, the installation of Microsoft Internet Explorer on the remote Windows host is no longer supported.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

Solution

Either Upgrade to a version of Internet Explorer that is currently supported or disable Internet Explorer on the target device.

See Also

http://www.nessus.org/u?828ddfe1

http://www.nessus.org/u?e0d2ff5a

https://docs.microsoft.com/en-us/deployedge/edge-ie-disable-ie11

Plugin Details

Severity: Critical

ID: 22024

File Name: smb_explorer_version.nasl

Version: 1.30

Type: local

Agent: windows

Family: Windows

Published: 7/11/2006

Updated: 7/4/2023

Asset Inventory: true

Supported Sensors: Nessus Agent, Nessus

Risk Information

CVSS Score Rationale: Tenable score for unsupported products.

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: manual

CVSS v3

Risk Factor: Critical

Base Score: 10

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:microsoft:ie

Required KB Items: SMB/Registry/Enumerated, SMB/registry_full_access, SMB/IE/Version

Reference Information

IAVA: 0001-A-0557