is there an updated file for cng.sys for Win 2012R2 servers? I'm looking for version 6.3.9600.19872

Question

I'm looking for version 6.3.9600.19872. I have installed 2020-11 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4586823) but it only gives 6.3.9600.19871 version which is non-compliant in our environment. Thanks for any help.

Answer 1

Hi,

We haven't heard cng.sys has released any update file for 6.3.9600.19872 version, the latest version is 6.3.9600.19871.

Also I have checked KB4592495 which not contained the cng.sys files.

Do you mean the file was regarded as virus file with your antivirus software?
I noticed the issue was reported since 2018, did you update your antivirus software in those days?

What version you used before? Does previous version regarded as virus?

We could replace it with previous cng.sys version if the previous works well in your environment.
If other device in your environment have not update, try to check cng.sys located in C:\Windows\System32\drivers, copy it and replaced yours.

Bests,

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Yes, according to our vulnerability scans 6.3.9600.19871 is flagged as non-compliant and x.19872 is needed to mitigate. Do you know if Jan. 2021 patch cycle will address this issue or will there be an 'out of band' resolution?

• 2020-11 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4586823) - verified installed
• KB4586823 - verified installed as part of Nov. 2012 patch cycle
  • KB4586845 - verified installed as part of Nov. 2012 patch cycle
  • KB4586781 - tried to install but 'n/a' to 2012R2 servers

Answer 3

Hi,

Thank you for your feedback.

We haven't heard any information about Microsoft will release an update version for cng.sys in next month. I am afraid we need to contact with Nessus if they have any update on their product to fix this issue.

On the vulners website, I noticed it refer to Windows 10 1709 (system build 16299) with cng.sys version 6.3.9600.19872. If you would like to try, find a Windows 10 device and go to C:\Windows\system32\drivers, and check cng.sys version number. If the version is what you want, try to copy and paste on Windows server 2012 to check if it works well.

If any reply is useful for you, please mark it as answer.

Bests,

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Hi,

We would like to know if any previous information is useful for you.

If yes, please kindly mark it as answer.

If you have any other issue or concerns, please reply to us directly.

Bests,

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.