Vulnerable software : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion UBR - contains 4771

Question

Hello Team,

I'm running a Windows server 2016, Standard Edition in which I lunch a vulnerability scanning by Nexpose. The vulnerability rapport generated a large number of CVE, that should be fixed by two KB :
KB5009546 (Not installed when running Get-HotFix -Id KB5009546 )
KB5008207(Already installed when running Get-HotFix KB5008207 )
All CVE addresed by those KB show a description message "Vulnerable OS: Microsoft Windows Server 2016 Standard Edition 1607 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion UBR - contains 4771"

So i feel confused about this message and the way I should addressed to fix those vulnerabilities.

Does the install of the KB KB5009546 will fix the issue ?

Thank you !

Answer 1

Yes thats right with more latest LCU that should also be taken care of .

Answer 2

I have the same issue but with Windows 10 22H2. December updates installed but Rapid7 InsightVM still shows as vulnerable:

 * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
    * UBR - contains 3570

How do I fix this? Our company uses a n-1 view so, we can't install January's patches just yet.