The Vulnerability scan doesn't like this file - Vulnerable software installed: Microsoft .NET Framework 3.5 SP1 Based on the following 2 results: C:\Windows\Microsoft.NET\Framework\v2.0.50727\Webengine.dll - file does exist C:\Windows\Microsoft.NET\Framework\v2.0.50727\Webengine.dll has version 2.0.50727.8962 The Windows\Microsoft.NET\Framework folder has v1.0.3705 folder v1.1.4322 Folder v2.0.50727 folder - which houses this vulnerable DLL v3.0 folder v3.5 folder v4.0.30319 folder Do I need to somehow apply a patch? When I force Windows update - Nothing is out there for me. I also don't feel I can/should simply delete this older Webengine.dll file Please help.

Sorry, my bad. I'd suggest installing the latest cumulative update for Server 2016 v1607 https://support.microsoft.com/en-us/topic/may-10-2022-kb5013952-os-build-14393-5125-0bb9f7e6-0360-4162-8eab-108e28d3a090 https://devblogs.microsoft.com/dotnet/framework-may-2022-updates/ If you look in the file info here it shows to be current. https://download.microsoft.com/download/7/5/0/7504ab90-2820-4c04-8177-c86ed68da80d/5013952.csv --please don't forget to upvote and Accept as answer if the reply is helpful--

This is a false positive with the Scanning company. Thank you for your help with this. This is a answer and this all can be closed.

My completely patched server 2016 is showing a vulnerability because webengine.dll - v2.0.50727 exists.

Accepted answer

Dave Patrick 426K Reputation points MVP

2022-05-18T22:11:48.03+00:00

Sorry, my bad. I'd suggest installing the latest cumulative update for Server 2016 v1607
https://support.microsoft.com/en-us/topic/may-10-2022-kb5013952-os-build-14393-5125-0bb9f7e6-0360-4162-8eab-108e28d3a090
https://devblogs.microsoft.com/dotnet/framework-may-2022-updates/

If you look in the file info here it shows to be current.
https://download.microsoft.com/download/7/5/0/7504ab90-2820-4c04-8177-c86ed68da80d/5013952.csv

--please don't forget to upvote and Accept as answer if the reply is helpful--
Please sign in to rate this answer.
Dave Patrick 426K Reputation points MVP

2022-05-19T11:19:20.273+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Peter Best 31 Reputation points

2022-05-19T12:22:40.713+00:00

The server has had that 2022-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5013952) all along.

I can't figure this one out. I DO see this old vulnerable file existing -
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Webengine.dll - file does exist

OS Version 1607 and 1809 (2019) seem to be involved. It's lie they won't take the .NET Framework update. I also noticed I don't see any previous .NET Framework update/patches applied in the past.

Dave Patrick 426K Reputation points MVP

2022-05-19T12:23:58.197+00:00

If you look in the file info here it shows to be current. May 10, 2022—KB5013952 (OS Build 14393.5125)
https://download.microsoft.com/download/7/5/0/7504ab90-2820-4c04-8177-c86ed68da80d/5013952.csv

May need to ask the scan provider about this.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Peter Best 31 Reputation points

2022-05-19T13:34:56.147+00:00

I do have a ticket out to scan provider. I also wonder if I'm missing a older .NET patch so this MAY 2022 patch won't apply.

My 4.7.folder does properly apply this webengine.dll file.

However, the old 2.0 folder keeps this vulnerable .dll in it. I hope that makes sense?

Dave Patrick 426K Reputation points MVP

2022-05-19T13:38:43.203+00:00

I also wonder if I'm missing a older .NET patch so this MAY 2022 patch won't apply.

Couldn't answer that one but the CSV above confirms Webengine.dll version 2.0.50727.8962 is current as of the latest cumulative update.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Dave Patrick 426K Reputation points MVP

2022-05-20T12:39:09.863+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--
Sign in to comment

My completely patched server 2016 is showing a vulnerability because webengine.dll - v2.0.50727 exists.

1 additional answer