The remote Windows host is missing an update to the Secure Boot DBX. It is, therefore, affected by multiple vulnerabilities:
A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
(CVE-2020-25632)
A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2021-20233)
Additionally, the host is affected by several other security feature bypasses in Secure Boot.
Note: Tenable is testing for the presence of the expected signatures added in the DBX update published on March 2, 2021 referenced in the vendor advisory.
Binary data windows_uefi_boothole.nbin
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10713
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14308
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14309
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14310
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14311
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14372
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15705
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15706
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15707
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25632
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25647
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27749
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27779
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20225
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20233
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3418
www.nessus.org/u?6f75665a
www.nessus.org/u?827c25cc
www.nessus.org/u?840ba26f
www.nessus.org/u?e51610a5
uefi.org/revocationlistfile/archive