Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Caută ajutor

Atenție la excrocheriile de asistență. Noi nu îți vom cere niciodată să suni sau să trimiți vreun SMS la vreun număr de telefon sau să dai informații personale. Te rugăm să raportezi activitățile suspecte folosind opțiunea „Raportează un abuz”.

Află mai multe
Firul de discuție a fost arhivat. Adresează o întrebare nouă dacă ai nevoie de ajutor.
Arhivate

CVE-2024-7528 not closing on Rapid7/Nexpose scans for Windows Server 2012 R2

Firefox Enterprise Confidențialitate și securitate
Chris C replied acum 1 an
Chris C
Chris C

CVE-2024-7528 is not closing on Rapid7/Nexpose re-scans for Windows 2012 R2 Servers. When the latest ESR package for Windows 2012 R2 is applied the vulnerability remains open even when using ESR version 115.17.0.

When I check the NVD it looks like the only vulnerable versions are <115.7.0. https://nvd.nist.gov/vuln/detail/CVE-2024-7528#range-13199073

Is this vulnerability resolved in any released version of ESR? In browsing the release notes for the past few ESR releases I'm not seeing it mentioned so curious if it's

CVE-2024-7528 is not closing on Rapid7/Nexpose re-scans for Windows 2012 R2 Servers. When the latest ESR package for Windows 2012 R2 is applied the vulnerability remains open even when using ESR version 115.17.0. When I check the NVD it looks like the only vulnerable versions are <115.7.0. https://nvd.nist.gov/vuln/detail/CVE-2024-7528#range-13199073 Is this vulnerability resolved in any released version of ESR? In browsing the release notes for the past few ESR releases I'm not seeing it mentioned so curious if it's

Toate răspunsurile (2)

Mike Kaply
Mike Kaply
  • Moderator
Echipa Mozilla

This was not an issue in the 115 ESR. The bug that caused it landed in Firefox 127.

Chris C
Chris C Deținătorul întrebării

Thanks Mike! I'm guessing its an issue with the scanner misidentifying which versions are effected by that CVE.